FIN11 installs TrueBot, then uses the malware to deliver the FlawedGrace Remote Access Trojan (RAT), which is used to escalate privileges and maintain persistence. FIN11 has been using TrueBot malware to deploy Clop ransomware on victims’ networks. TrueBot is used by multiple threat actors including FIN11 and the Silence group. TrueBot is a downloader/botnet malware that establishes a connection with its command-and-control server, collects information on compromised systems, and is used for launching more extensive attacks on compromised networks. Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), Multi-State Information Sharing and Analysis Center (MS-ISAC), and the Canadian Centre for Cyber Security (CCCS) warning about a TrueBot malware campaign targeting organizations in the United States and Canada.
and Canadian OrgsĪ joint cybersecurity advisory has been issued by the U.S.
Cybersecurity Agencies Warn of TrueBot Malware Campaign Targeting U.S.
0 kommentar(er)
