Conti Ransomware “Acquires” TrickBot as It Thrives Amid Crackdowns

Summary:

TrickBot has been around since 2016. It was initially a banking trojan designed to steal financial data, but it evolved into a modular stealer that could target a wide range of information. TrickBot has survived a takedown attempt and the arrests of some developers. It also helped the Emotet malware get back in the game following a law enforcement action that disrupted its global operation in January 2021. TrickBot developers have also collaborated with the creators of the Ryuk and Conti ransomware. The Conti ransomware emerged in 2020 and cybercriminals have used it in attacks against many organizations worldwide. In these attacks, Conti operators not only encrypt files on compromised systems, but also steal data that they can threaten to leak if the victim refuses to pay a ransom. The cybercriminals are believed to have made hundreds of millions of dollars. More than a dozen victims are listed on Conti’s Tor-based leak website at the time of writing, including British snacks company KP Snacks. The hackers have leaked hundreds of megabytes of data allegedly stolen from the firm.

Additional Discussion:

Link:

• https://www.securityweek.com/conti-ransomware-acquires-trickbot-it-thrives-amid-crackdowns