Trickbot uses compromised MikroTik routers as C2 communication proxies

MikroTik routers are getting compromised to serve as communication proxies for Trickbot malware, to enable Trickbot-affected devices to communicate with their their C2 server in a way that standard network defense systems won’t detect, Microsoft researchers have found. MikroTik routers under attack Trickbot is a modular trojan that’s been around since 2016 and is often used by cybercriminals to deliver ransomware or other malware. Previous attempts to cripple the Trickbot botnet have been just partly … More →

The post …

c2 commun communication don't miss featured news internet of things malware microsoft mikrotik proxies routers trickbot