TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

F5 Labs

Trickbot Rapidly Expands its Targets in August, Shifting Focus to US Banks and Credit Card Companies

2017-09-14 · Read original ↗

ATT&CK techniques detected

1 predictions
T1566.002Spearphishing Link
55%
"the set of urls they want from dyre, make some tweaks based on updates to banks ’ login sequences, and spend the rest of their time focusing on making the code itself more effective. we anticipate that trickbot will continue to focus on the same firms targeted by dyre through 201…"

Summary

TrickBot kicked into high gear coming into August with the most targeted URLs since its launch. It released a new worm module, shifted its focus towards the US, and soared past the one thousand target URL mark in a single configuration.