• Skip to main content
  • Skip to primary sidebar
  • Skip to footer

Technologous - Managed IT Solutions Bryan/College Station

  • Home
  • About
    • Areas We Serve
    • Our Leadership
      • Chris Dawson
      • Ian Soares
  • IT Services
    • Managed IT
    • Support IT
    • Cloud IT
  • Blog
  • Request a Consultation
  • Contact
You are here: Home / Blog / Trickbot Malware Went Into Hiding And Now It’s Back

Trickbot Malware Went Into Hiding And Now It’s Back

For more than five months, the internet breathed a collective sigh of relief as one of the most notorious strains of malware, Emotet, went dark and ceased all activity. It was as though the hackers in control of the code had simply pulled the plug. All good things, however, inevitably end. On July 17th, 2020, Emotet came roaring back to life and began spamming out vast numbers of emails in what is a new campaign.

The malware relies on the tried and true tactic of sending emails with poisoned files that are disguised as payment reports, shipping details, employment opportunities, and the like. Of course, that’s just the cover. If an unwitting recipient opens these corrupted files, instead of gaining access to the promised information, they’ll unknowingly install another dreaded malware strain, Trickbot.

Trickbot is a nasty piece of work, capable of spreading laterally throughout a network, compromising an increasing number of machines. On every machine it infects, it will look for and harvest login credentials and cookies from browsers. They pay particular attention to banking credentials, but happily harvest anything else as well.

In addition to that, it will steal OpenSSH keys and Active Directory Services databases and the like. Worst of all, once it has stolen everything it finds of interest, it opens a reverse shell on the network, giving access to groups in control of the Conti and Ryuk ransomware strains. This second group of hackers will gleefully descend on the now fully compromised network, stealing yet more files before encrypting everything and demanding a hefty ransom. It’s a one-two punch that can devastate any business.

Needless to say, this is a true nightmare scenario you don’t want to live through. Be sure your employees and IT staff are on high alert. An Emotet/Trickbot attack is something to be avoided at all cost.

August 8, 2020 Filed Under: Blog Tagged With: Email, emotet, malware, trickbot

Primary Sidebar

GET OUR BLOG IN YOUR EMAIL!

Archives

  • February 2021
  • January 2021
  • December 2020
  • November 2020
  • October 2020
  • September 2020
  • August 2020
  • July 2020
  • June 2020
  • April 2020
  • March 2020
  • February 2020
  • December 2019
  • November 2019
  • October 2019
  • September 2019
  • August 2019
  • July 2019
  • June 2019
  • May 2019
  • April 2019
  • March 2019
  • February 2019
  • January 2019
  • December 2018
  • August 2018

Tags

adobe android App Apple attack Attacks Breach Browser Chrome Credit Card Dark Web Data Database Data Breach Email Facebook Firefox gmail Google Google Chrome government hacker Hackers information Intel iOS iPhone malware Microsoft Microsoft Windows 10 office 365 pandemic Password Passwords patch Phishing ransomeware Ransomware security Social Media Update Vulnerability Wifi Windows Windows 10

Footer

Contact Us

Address: 3091 University Drive, Unit 210, Bryan, Texas 77802
Phone: 979-217-1226

Our Blog

  • Rise In PC Hardware Sales Blamed on Pandemic February 26, 2021
  • Healthcare Ransomware Problem Getting Worse January 30, 2021
  • Chrome Helps Users Check Passwords For Strength January 29, 2021
  • DuckDuckGo Search Engine Sees Huge Growth January 28, 2021
  • Malware Is Android’s Worst Nightmare January 27, 2021

Search

Follow Us

  • Facebook
  • Home
  • About
  • Resources
  • Contact
  • Our Leadership
  • Why Choose Us?
  • IT Services
  • Request a Consultation

Copyright © 2021| All Rights Reserved | Powered By Technologous, LLC | Log in