View source for Banking trojan Dridex uses macros for infection

{{Publication
|Image=
|Legend=
|Document=
|Licence=
|Type=
|Video=
|Link=http://blog.trendmicro.com/trendlabs-security-intelligence/banking-trojan-dridex-uses-macros-for-infection/
|Author=Rhena Inocencio, 
|NomRevue=TrendLabs Security Intelligence Blog
|Date=2014-11-05
|Editor=Trend Micro
|Year=2014
|ISBN=
|Page=
|Botnet=Dridex, Cridex, 
|Malware=, 
|OffensiveTool=
|ExploitKit=, 
|Campaign=
|Campaign2=
|Campaign3=
|Campaign4=
|Campaign5=
|Service1=
|Service2=
|Service3=
|Service4=
|Service5=
|Vulnerability1=
|Vulnerability2=
|Vulnerability3=
|Vulnerability4=
|Vulnerability5=
|CCProtocol=, 
|Operation=, 
|Abstract=The appearance of DRIDEX comes a couple of years after CRIDEX’s entry in the threat landscape. Both CRIDEX and DRIDEX steal personal information, specifically related data to online banking. DRIDEX is considered as the successor because it uses a new way to steal information—via HTML injections.

However, there is a major difference between the two. CRIDEX malware is one of the payloads associated with exploit kit spam attacks. DRIDEX, on the other hand, relies on spam to deliver Microsoft Word documents containing malicious macro code. The macro code downloads DRIDEX onto the affected system.
|Keyword=, 
}}