At around 09:00 BST yesterday, Forcepoint Security Labs™ observed a significant malicious email campaign from the Necurs botnet. Necurs is a prevalent botnet that is known to spreading Locky ransomware, pump-and-dump stock scams, and more recently the Jaff ransomware. This time Necurs has been seen spreading the Trickbot banking Trojan, complete with an updated set of targets.
Article Link: https://blogs.forcepoint.com/security-labs/trickbot-spread-necurs-botnet-adds-nordic-countries-its-targets