Latest TrickBot cyber-gang activity
TrickBot operations update: infrastructure rebuilds, module evolution, partnership with ransomware affiliates and detection signals across recent campaigns.
Tag
Banking Trojan
Read the analysis
Ursnif — 2 August 2021 campaign
Ursnif campaign of 2 August 2021: Italian-language phishing waves, payload delivery patterns and host indicators across the latest infection set.
Ursnif and Android APPs
Ursnif banking trojan extending its operation to Android: malicious APK delivery, second-stage capabilities, overlay attacks and detection considerations.
Ursnif Malware — behaviour and removal
Ursnif (Gozi/ISFB) banking trojan: persistence mechanisms, web-injection capabilities, command-and-control patterns and remediation steps for infected hosts.
