Banking trojan Dridex uses macros for infection - Revision history

Eric.freyssinet: Text replacement - " blog.trendmicro.com" to ""

2015-08-05T20:13:19Z

Text replacement - " blog.trendmicro.com" to ""

← Older revision		Revision as of 20:13, 5 August 2015
Line 6:		Line 6:
	\|Type=		\|Type=
	\|Video=		\|Video=
	\|Link=http://blog.trendmicro.com/trendlabs-security-intelligence/banking-trojan-dridex-uses-macros-for-infection/ ~~blog.trendmicro.com~~		\|Link=http://blog.trendmicro.com/trendlabs-security-intelligence/banking-trojan-dridex-uses-macros-for-infection/
	\|Author=Rhena Inocencio,		\|Author=Rhena Inocencio,
	\|NomRevue=TrendLabs Security Intelligence Blog		\|NomRevue=TrendLabs Security Intelligence Blog

Eric.freyssinet: Text replacement - "Campaign1=" to "Campaign="

2015-07-31T20:31:48Z

Text replacement - "Campaign1=" to "Campaign="

← Older revision		Revision as of 20:31, 31 July 2015
Line 18:		Line 18:
	\|OffensiveTool=		\|OffensiveTool=
	\|ExploitKit=,		\|ExploitKit=,
	\|~~Campaign1~~=		\|Campaign=
	\|Campaign2=		\|Campaign2=
	\|Campaign3=		\|Campaign3=

Eric.freyssinet: 1 revision imported

2015-02-07T14:30:51Z

1 revision imported

← Older revision		Revision as of 14:30, 7 February 2015
(No difference)

Eric.freyssinet at 12:38, 8 November 2014

2014-11-08T12:38:26Z

New page

{{Publication
|Image=
|Legend=
|Document=
|Licence=
|Type=
|Video=
|Link=http://blog.trendmicro.com/trendlabs-security-intelligence/banking-trojan-dridex-uses-macros-for-infection/ blog.trendmicro.com
|Author=Rhena Inocencio,
|NomRevue=TrendLabs Security Intelligence Blog
|Date=2014-11-05
|Editor=Trend Micro
|Year=2014
|ISBN=
|Page=
|Botnet=Dridex, Cridex,
|Malware=,
|OffensiveTool=
|ExploitKit=,
|Campaign1=
|Campaign2=
|Campaign3=
|Campaign4=
|Campaign5=
|Service1=
|Service2=
|Service3=
|Service4=
|Service5=
|Vulnerability1=
|Vulnerability2=
|Vulnerability3=
|Vulnerability4=
|Vulnerability5=
|CCProtocol=,
|Operation=,
|Abstract=The appearance of DRIDEX comes a couple of years after CRIDEX’s entry in the threat landscape. Both CRIDEX and DRIDEX steal personal information, specifically related data to online banking. DRIDEX is considered as the successor because it uses a new way to steal information—via HTML injections.

However, there is a major difference between the two. CRIDEX malware is one of the payloads associated with exploit kit spam attacks. DRIDEX, on the other hand, relies on spam to deliver Microsoft Word documents containing malicious macro code. The macro code downloads DRIDEX onto the affected system.
|Keyword=,
}}