Malware
TrickBot
- First Reported
- Jun 18, 2026
- Latest Reported
- Aug 13, 2026
Reported Context (3)
- Bentley is officially affiliated with Trickbot and has been implicated in developing and administering Conti, according to leaked chats. Report Details How Malware Crypting Services Help Threat Actors Evade Detection
- After conducting an in-depth analysis, I determined that these samples are TrickBot variants that use DNS tunneling to communicate with their command-and-control (C2) servers. Fortinet Analyzes TrickBot Variant Using DNS Tunneling for C2
- focused on known malware families such as IcedID, Smokeloader, Pikabot, Bumblebee, QakBot, DanaBot, TrickBot, and, most recently in November 2025, the Rhadamanthys infostealer, VenomRAT, and the Elysium botnet. Operation Endgame Disrupts SocGholish Fake-Update Infrastructure
Malware (30)
People (2)
Threat Actors (9)
MITRE ATT&CK (75)
Vendors (24)
Products (31)
Tools (13)
Industries (8)
Countries (3)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.