0x0vidMalware Analysis: Trickbot, Part 3 — Network Collector DLLConcluding our series on Trickbot, we will be taking a look at one of the modules used by the malware for network and AD enumerationJul 6
0x0vidMalware Analysis: Trickbot, Part 2 — AgentMalware analysis of the Trickbot agent and persistence mechanismJul 2
InWalmart Global Tech BlogbyJason ReavesDiavol the Enigma of RansomwareBy: Jason Reaves and Joshua PlattMar 10, 2022Mar 10, 2022
InWalmart Global Tech BlogbyJoshua PlattNimar LoaderBaza (BazarLoader & BazarBackdoor) has been attributed to the organized cybercrime group behind Trickbot by multiple security vendors over…Mar 1, 2021Mar 1, 2021
InDoublePulsarbyKevin BeaumontTrickboot — defending against and monitoring for UEFI firmware tamperingEclypsium and AdvIntel recently published some superb research on a Trickbot module, PermaDLL (they’re dubbing Trickboot), which allows…Dec 4, 2020Dec 4, 2020
0x0vidMalware Analysis: Trickbot, Part 3 — Network Collector DLLConcluding our series on Trickbot, we will be taking a look at one of the modules used by the malware for network and AD enumerationJul 6
0x0vidMalware Analysis: Trickbot, Part 2 — AgentMalware analysis of the Trickbot agent and persistence mechanismJul 2
InWalmart Global Tech BlogbyJason ReavesDiavol the Enigma of RansomwareBy: Jason Reaves and Joshua PlattMar 10, 2022
InWalmart Global Tech BlogbyJoshua PlattNimar LoaderBaza (BazarLoader & BazarBackdoor) has been attributed to the organized cybercrime group behind Trickbot by multiple security vendors over…Mar 1, 2021
InDoublePulsarbyKevin BeaumontTrickboot — defending against and monitoring for UEFI firmware tamperingEclypsium and AdvIntel recently published some superb research on a Trickbot module, PermaDLL (they’re dubbing Trickboot), which allows…Dec 4, 2020
Inm4n0w4rbym4n0w4rTrickBot … many tricksAs part of my work at VinCSS, I wrote a detailed analysis about TrickBot.Oct 28, 2021
heige“Behavior Mapping” in Cyberspace — One Net Cleans APT and Botnet C2sAuthor: Heige (a.k.a Superhei) of KnownSec 404 Team https://twitter.com/80vul 09/07/2021Sep 7, 2021
GhouLSec[Mal Series#19] Trickbot shellcode analysisTrickbot shellcode v1106, 2021 analysis.Aug 10, 2021