The Diavol ransomware campaign has been formally tied to the notorious TrickBot gang by the FBI.
TrickBot gang has been formally connected to the Diavol ransomware campaign by the FBI’s Cybercrime Task Force.
To keep TrickBot up to date with the latest security threats, its creators have added new functionality to the banking Trojan since it was first released in October 2016. Malware-as-a-service providers (MaaS) continue to make the botnet available to customers. The botnet is used to deliver a wide variety of malware, including ransomware like Conti and information-stealing malware like Ryuk. More than a million machines have been compromised by the Trickbot botnet as of this writing.
Fortinet researchers originally discovered the Diavol ransomware family in July and assumed that Wizard Spider, the cybercrime organization responsible for the TrickBot botnet, had created it.
Like Conti, Diavol doesn’t resist infecting Russian victims, according to Fortinet security researchers.
#Diavol #ransomware #Cybersecurity #News #FBI

Share: