Despite takedown attempts in 2020, reports suggested that the creators of TrickBot made efforts to reinstate the demolished infrastructure to launch more campaigns. A backdoor malware dubbed BazarBackdoor from the TrickBot cybercrime gang has come to the foreground in the threat landscape.
Researchers have discovered a newer version of BazarBackdoor being increasingly distributed through spam campaigns. The malware is rewritten in Nim programming language to enhance its evasion capability. It allows cybercriminals to remotely access the computers while spreading laterally throughout the network.
To Read More: Cyware
