2018-05-25 - QUICK POST: TRICKBOT MALSPAM
- 2018-05-25-Trickbot-malspam-1143-UTC.eml.zip 30 kB (29,933 bytes)
- 2018-05-25-Trickbot-malspam-infection-traffic.pcap.zip 5.4 MB (5,406,904 bytes)
- 2018-05-25-malware-and-artifacts-from-Trickbot-infection.zip 458 kB (457,873 bytes)
- Zip archives are password-protected with a standard password. If you don't know it, see the "about" page of this website.
- Not much different than yesterday.
- Today I just did a regular infection run on a single Windows host (no Active Directory environment).
- My Online Security first blogged about today's Trickbot malspam here.
Shown above: Infection traffic filtered in Wireshark.
Click here to return to the main page.