mshare Archives - Securezoo

TrickBot trojan updates propagation module with nworm to evade detection

Malware / Frank Crast / June 2, 2020 / Active Directory, Domain Controller, mshare, nworm, Palo Alto Networks, SMB, Trickbot, Windows

TrickBot recently replaced one of its propagation modules “mworm” with new module named “nworm.” The updated module can exploit vulnerable domain controllers (DCs) and evade detection by running in memory.

TrickBot trojan updates propagation module with nworm to evade detection Read More »