Malware | Threat analysis

Introducing TrickBot, Dyreza’s successor

October 24, 2016 - Recently, our analyst Jérôme Segura captured an interesting payload in the wild. It turned out to be a new bot, that, at the moment of the analysis, hadn't been described yet.

Malware | Threat analysis

A Technical Look At Dyreza

November 4, 2015 - Inside the core of Dyreza - a look at its malicious functions and their implementation.

Malware | Threat analysis

Unpacking Fraudulent “Fax”: Dyreza Malware from Spam

October 19, 2015 - We're unpacking malware delivered in a spam campaign from earlier this month.

Trojans

TrickBot adds new trick to its arsenal: tampering with trusted texts

September 3, 2019 - TrickBot's latest feature allows it to tamper with the web sessions of users from Verizon, T-Mobile, and Sprint mobile carriers.

101

TrickBot takes over as top business threat

November 14, 2018 - There’s a newer, more sophisticated banking Trojan in town attempting to penetrate business networks and giving Emotet a run for its money. And its name is TrickBot. Learn how this threat is giving organizations a run for their money.

Malware | Threat analysis

What’s new in TrickBot? Deobfuscating elements

November 12, 2018 - TrickBot has been present in the threat landscape from quite a while. We wrote about its first version in October 2016. October 2018 marks end of the second year since TrickBot’s appearance. Possibly the authors decided to celebrate the anniversary by a makeover of some significant elements of the core. This post is an analysis of the updated obfuscation used by TrickBot’s main module.