Banking Trojan Takes Tips from WannaCry
Security researchers have discovered a new version of a Trickbot banking Trojan knows as 1000029. The new version has incorporated one of the aspects of WannaCry that made it so devastating – it’s ability to self-spread.
TrickBot is a banking Trojan malware that has been targeting financial institutions across the world since last year. The new version has been evolved to spread locally across networks via SMB. The new variant can be disguised as setup.exe and delivered through a PowerShell script to spread through interprocess communication and download addition versions of the TrickBot to shared drives.
Return To Article
