The notorious information-stealing trojan is one of the most prolific forms of malware out there – and has evolved yet again.
Trickbot malware has been updated with a new method of propagation which makes it even harder to detect.
Starting life as a banking trojan, Trickbot first emerged in 2016 but in the years since it has been repeatedly re-purposed for other means including being used as a fully-fledged information stealer, as well as providing backdoor access to infected machines, enabling cyber criminal groups to use it as gateway for delivering other malware onto already compromised networks.
Trickbot can also operate as a botnet to help spread itself to additional victims, commonly using phishing email spam campaigns to distribute malicious attachments which execute it on a Windows machine if opened. Once executed on a machine, Trickbot can also exploit the EternalBlue vulnerability to move laterally around a network.
Source: This new Trickbot malware update makes it even harder to detect | ZDNet
