Network sources report that the TrickBot malware may have been used to steal 250 million email account credentials, some of which belong to the governments of the USA, UK, and Canada. This malware was first spotted in 2016 but has not been used for stealing email account credentials until recently.
According to Deep Instinct, a cybersecurity company, TrickBot has started gathering email credentials and contacts. Researchers have named the new tool TrickBooster. Its use involves hacking accounts to send out malicious spam emails, after which the sent messages are deleted from the 'Sent' and 'Trash' folders.
As part of a recent investigation, Deep Instinct specialists discovered a database containing information on 250 million compromised email accounts. The company notes that millions of accounts belong to the governments of the USA, UK, and Canada. The database contains about 25 million Gmail accounts, as well as 19 million and 11 million accounts from Yahoo.com and Hotmail.com, respectively. Additionally, a significant portion includes records from AOL, MSN, Yahoo.co.uk, and others.
Experts believe that all these email accounts may be used by TrickBot operators to spread various types of malware. Currently, Deep Instinct specialists have not yet completed their investigation, which will allow for a more accurate assessment of the scale of TrickBot's spread.
Source: 3dnews.ru
