Microsoft dropped 94% of the Trickbot botnet

A week ago, Microsoft announced it was working with various security and telecom companies to take down Trickbot following a court ruling in the US.

The company said that this botnet is quite advanced and that it uses a malware model as a service to infect IoT systems and devices with ransomware.

The identities of Trickbot's administrators are currently unknown, and Microsoft said it has been used for individual criminal but also for government purposes, making it even more dangerous for the U.S. presidential election.trickbot

Today, the company provided more details for what he has done so far for the Trickbot network but also what he intends to do next.

Microsoft says it has halted 18% of Trickbot critical business infrastructure in just a few days since Oct. 94. Of the 69 major Trickbot servers detected, 62 have crashed and botnet administrators are trying to add new infrastructure. Microsoft said it had managed to add 59 new servers but the company immediately shut them down, bringing the number of servers down to 120 from 128.

The company from Redmond states that this is an active operation and is a laborious process with managers from the opposing side who do not stop insisting. So these elements will change regularly in the next period. However, the company states that:

First of all, after securing the court order that allowed it to disable Trickbot's core infrastructure, it will continue to do so until Election Day on November 3rd. Works with global companies and hosting providers to uncover new command and control servers as well as compromised IoT.

Microsoft then noticed that people using Trickbot were trying to build new infrastructure and work with other criminals. The move is not as dangerous as the inherent capabilities of Trickbot, but it is still something that will draw particular attention to.

Finally, Microsoft says its team is well-trained and highly trained in Trickbot infrastructure and can detect malicious activity. The team speaks directly to local ISPs, telecommunications companies and global partners who monitor and share information about Trickbot 24/7 activities.

iGuRu.gr The Best Technology Site in Greecefgns

every publication, directly to your inbox

Join the 2.100 registrants.

Written by giorgos

George still wonders what he's doing here ...

Leave a reply

Your email address is not published. Required fields are mentioned with *

Your message will not be published if:
1. Contains insulting, defamatory, racist, offensive or inappropriate comments.
2. Causes harm to minors.
3. It interferes with the privacy and individual and social rights of other users.
4. Advertises products or services or websites.
5. Contains personal information (address, phone, etc.).