CUSO-News---Payments-Report

close

Categories

More Tags

Subscribe to Email Updates

Popular Stories

The Quick On Visa’s 8-Digit Bin Migration
How One Credit Union's Workforce Went Completely Remote
Frictionless Payments
Clever Phishing Emails Target Employees
More Evidence That Pandemic Is Accelerating Existing Trends
Written by Cyndie Martini
on December 01, 2020

In another sign that hackers are exploiting the pandemic, Area 1, a security firm, recently released a report about a phishing email scam by the hacker group called Trickbot. Trickbot is also the same name the group has given its malware software. The latest Trickbot scam gets into companies by sending an email to employees, notifying them that they have been terminated. The email tells employees to click a link in the email for further details, and if the link doesn't work, click another link in the email.

Trickbot got its start as a Banking trojan malware but has evolved to target other industries. Trickbot is also a botnet. A botnet is a network of all the devices infected by the malware software (i.e., Trickbot). These infections may have taken place over several years. Once infected, hackers can steal information from the machine and use its computing power without the user ever knowing.

Microsoft orchestrated a takedown of Trickbot in October of this year. However, these groups often remobilize and rebuild their botnet networks, making them even more clever the next time around.

Credit unions can protect themselves against malware such as Trickbot by simply following best security practices and ensuring those practices are distributed to their employees. Credit unions should also keep employees informed about recent scams and what specifically to look out for. Keeping the company's software infrastructure consistently updated is always a good move. The latest software updates will often have patches to help avoid the latest security exploits.

Anyone who knows not to click links in suspicious emails or those from people they don't know has nothing to worry about. While the Trickbot email does try to look official, disguising itself as someone from human resources, wary users can still spot these emails by their language and company-specific terms. If nothing else, employees should confirm with their employer if the email is real.

Let Us Know What You Thought about this Post.

Put your Comment Below.

You may also like:

Cybersecurity

Pandemic Cybercrime Continues To Evolve

We've written many times about how cybercriminals are taking advantage of the pandemic to try and exploit bank and credi...

Cybersecurity

Introduction To Visa's New Advanced Identity Score

In late June of this year, Visa announced a new tool called Advanced Identity Score (AIS) to help combat new account and...

Cybersecurity

Three Tips To Reduce Cybercrime Exploits

As credit unions and banks were forced into transitioning nearly all of their workers into remote work over a matter of ...