Multiple Trickbot Campaigns
released on 2017-07-19 @ 11:17:23 AM
Just starting to see the second run of today’s Trickbot downloaders coming in. Same sites and payload as the earlier run. This later one comes from noreply@random email addresses. ( all spoofed) Has a blank subject line and a zip attachment containing a VBS file.