Download to read offline
Uploaded bySymantec
Dridex: All You Need To Know About This Persistent Financial Trojan
The document discusses a trojan designed to steal banking credentials by intercepting online banking sessions, primarily targeting users through spam emails that prompt them to enable macros. The w32.cridex trojan is distributed by professional cybercrime organizations, including a large gang with multiple subgroups, conducting over 145 campaigns per day and affecting organizations globally. The scope of the attacks over 10 weeks includes 270,000 instances of invoice processing and payment theft.
More Related Content
Similar to Dridex: All You Need To Know About This Persistent Financial Trojan
![Cyber-Security]shhsjjsjsjdjdjjddjjdjh.ppt](https://cdn.slidesharecdn.com/ss_thumbnails/cyber-security-20211013105857-240507130621-7a440293-thumbnail.jpg?width=640&height=640&fit=bounds)
Dridex: All You Need To Know About This Persistent Financial Trojan
- 1. @threa'ntel | www.symantec.com TROJAN DESIGNED TO STEAL BANKING CREDENTIALS BY INTERCEPTING ONLINE BANKING SESSIONS WHO IS BEHIND IT? USER RECEIVES SPAM EMAIL 1 USER OPENS ATTACHMENT & IS ASKED TO ENABLE MACROS 2 VBS.DOWNLOADER.TROJAN IS DROPPED 3 .VBS FILE INSTALLS W32.CRIDEX TROJAN 4 WHO HAVE THEY TARGETED? AUSTRALIA 18 ITALY 29 US 76 UAE 14 UK 33 ?PROFESSIONAL CYBERCRIME ORGANIZATIONS HOW IS IT DISTRIBUTED? ONE LARGE GANG MULTIPLE SUB GROUPS OR SPAM EMAIL CAMPAIGNS HOW BIG ARE THE ATTACKS? OVER 10 WEEKS… 270K INVOICE ORDER SCAN RECEIPT PAYMENT #TROJAN #DRIDEX CAMPAIGNS 145 CAMPAIGNS PER DAY 3 WHAT DOES IT DO? EMAILS BLOCKED PER CAMPAIGN NUMBER OF ORGANIZATIONS