MS-ISAC Releases Security Primer on TrickBot Malware

The Multi-State Information Sharing and Analysis Center (MS-ISAC) has released a security primer on the TrickBot malware. TrickBot is a modular banking Trojan that targets users’ financial information and acts as a dropper for other malware. An attacker can leverage TrickBot’s modules to steal banking information, conduct system and network reconnaissance, harvest credentials, and achieve network propagation. The primer lists and briefly describes the common TrickBot modules and configuration profiles for each of these functions, although MS-ISAC cautions this information is not exhaustive as TrickBot is constantly adding new features. Read the primer at MS-ISAC.