Security News > 2020 > October > New TrickBot Control Servers Unable to Respond to Bot Requests

New TrickBot Control Servers Unable to Respond to Bot Requests
2020-10-20 17:36

Control servers included in the configuration file of new TrickBot samples fail to respond to bot requests, according to researchers at threat intelligence company Intel 471.

Days after the announcement Intel 471's researchers revealed that TrickBot resumed operations, and that Emotet was observed serving TrickBot payloads to infected machines.

On Tuesday, Intel 471 revealed that, starting Monday, October 19, Emotet has distributed TrickBot samples that include new control servers in their configuration, but that these servers were not able to respond to bot requests.

"On Oct. 19, 2020, when this latest Trickbot sample was distributed, none of the above listed control servers were able to respond to Trickbot bot requests, a state that continued at the time of this report. Intel 471 believes disruption operations against Trickbot are currently global in nature and have had success against Trickbot infrastructure," Intel 471 says.

These control servers were not listed in the most recently distributed TrickBot samples.


News URL

http://feedproxy.google.com/~r/Securityweek/~3/CI_U43R7Mjc/new-trickbot-control-servers-unable-respond-bot-requests