{"id":29057,"date":"2021-10-25T16:03:58","date_gmt":"2021-10-25T13:03:58","guid":{"rendered":"https:\/\/saudishopper.com.sa\/en\/?p=29057"},"modified":"2026-03-27T23:34:18","modified_gmt":"2026-03-27T20:34:18","slug":"trickbot-banking-trojan-evolves-with-61-sophisticated-techinques","status":"publish","type":"post","link":"https:\/\/saudishopper.com.sa\/en\/trickbot-banking-trojan-evolves-with-61-sophisticated-techinques\/","title":{"rendered":"Trickbot banking Trojan evolves with 61 sophisticated techinques"},"content":{"rendered":"\n

Discovered in 2016, Trickbot\u2019s main functionality was online banking data theft. Over its five years of activity, Trickbot banking Trojan has changed as attackers came up with a more advanced toolset. Kaspersky researchers have traced Trickbot\u2019s evolution by analyzing its 61 existing modules and defined how Trickbot has been updated.<\/strong><\/p>\n\n\n\n

Trickbot is a\u00a0descendant of the\u00a0Dyre<\/a>\u00a0banking Trojan, which originated as a Trojan stealing banking data and account credentials. Today Trickbot has evolved and become a multi-modular malware ranging its activity from data theft to other malware distribution (such as\u00a0Ryuk ransomware<\/a>).<\/p>\n\n\n\n

Overall, Kaspersky researchers have analyzed 61 modules of Trickbot and discovered Trojan\u00a0has acquired dozens of auxiliary modules that steal credentials and sensitive information. The malware spreads over local networks using stolen credentials and vulnerabilities, provides remote access, proxy network traffic, performs brute-force attacks, and downloads other malware.<\/p>\n\n\n\n

Trickbot targets companies and individual users around the world. According to Kaspersky, Trickbot\u2019s activity is not geographically limited and most of the affected users were located in the USA (13.21%), Australia (10.25%), and China (9.77%), followed by Mexico (6.61%) and France (6.30%).<\/p>\n\n\n\n

\u201cCybercriminals always update and refresh their toolsets. Right now, Trickbot has developed and become<\/em> one of the most powerful and dangerous samples of its malware type. As cybercriminals evolve, so should protection techniques. Most of the attacks can be prevented, that is why it is important to have an up-to-date security solution,\u201d\u00a0comments Oleg Kupreev, a security expert at Kaspersky.<\/p>\n\n\n\n

Kaspersky security solutions successfully detect and block all known versions of the Trickbot banking Trojan.<\/p>\n\n\n\n

Learn more about Trickbot on\u00a0Securelist<\/a>.<\/p>\n\n\n\n

To stay safe from financial threats like Trickbot, Kaspersky experts recommend that you:<\/p>\n\n\n\n