CISA-FBI Joint Advisory on TrickBot Malware

CISA-FBI Joint Advisory on TrickBot Malware

(TLP:WHITE)

Greetings whole community stakeholders,

CISA has released (TLP:WHITE) Current Activity: CISA-FBI Joint Advisory on TrickBot Malware. CISA and the FBI have released a Joint Cybersecurity Advisory (CSA) on TrickBot malware. A sophisticated group of cyber criminals are using phishing emails claiming to contain proof of traffic violations to lure victims into downloading TrickBot. TrickBot is a highly modular, multi-stage malware that provides its operators a full suite of tools to conduct a myriad of illegal cyber activities.

CISA Recommendations:

• To secure against TrickBot, CISA and the FBI recommend users and administrators review:
  • AA21-076A: TrickBot Malware as well as CISA’s Fact Sheet: TrickBot Malware for guidance on implementing specific mitigation measures to protect against this activity.

We kindly request any questions, feedback, or incidents related to these products be reported to CISA at Central@cisa.dhs.gov or 888-282-0870.

CyberLiaison
Cybersecurity Division
Cybersecurity and Infrastructure Security Agency