They thought they had it beat… but the Dridex botnet strikes again!
We recently published an article reporting the FBI's success in stopping the Drιdex malware, which was designed to steal banking credentials. However, more and more malware samples are appearing to be like Drιdex.
Spam emails containing the Drιdex malware appear daily despite the arrest of one of its key operators in August.
The findings confirm that while law enforcement agencies can claim temporary victories in combating cybercriminal networks, in reality it is very difficult to completely shut down their activities.
Dridex, also referred to as Cridex or Bugat, is advanced malware that collects financial login details and other personal information that can be used to 'drain' bank accounts.
The US and the UK said the Dridex botnet – the set of computers infected with this malware – has been taken down following their successful actions.
Two weeks before the US Department of Justice's announcement, Palo Alto Networks wrote that it had noticed a decrease in Dridex activity, but new activity began again around early October.
Often, malicious users using Drιdex trick people into downloading it by sending spam emails with malicious attachments or links, such as XML files and Microsoft Office documents.
