Forest Global Training Partners

Cyber Risks · Unit 42 Palo Alto Networks

Dridex Banking Trojan Begins 2015 with a Bang

Summary: Unit 42 reported that the Dridex banking Trojan, the latest version of Bugat/Feodo/Cridex, continued spreading through Word document attachments with macro code that downloads and executes the malware, with a new campaign in the first two weeks of the year. The targeting shifted toward the UK, which accounted for over one third of observed attacks, and the campaign used 43 different download locations compared with just six identified in October.

Key Takeaway: The Word documents pulled the Trojan from 43 distinct download URLs, many on compromised websites, so blocking a handful of known locations does not close this off. Dridex's purpose is to steal online banking credentials and use them to initiate transfers.

Read the original at Unit 42 Palo Alto Networks ↗

Topics
Malware
Related