IcedID Malware

IcedID, aka BokBot, is a banking trojan-type malware that can be used by attackers to steal banking credentials of users. IcedID mainly targets corporate bank accounts, providers of mobile service and card payment, as well as payroll, webmail, and e-commerce sites.

The IcedID malware is primarily dropped as a secondary payload from other malware, such as Emotet. After gaining initial access, IcedID bypasses the security of a firewall and establishes a connection through process-hollowing. IcedID seizes several API functions like “ntdll!ZwCreateUserProcess” and “ntdll!RtlExitUserProcess”. After execution, it removes the hooking code and creates a service host process, svchost.exe, which aids in writing itself into two dynamic link libraries: “KERNEL32.DLL” and “SHLWAPI.DLL". After this, it writes the payload into the device's “%ProgramData%” or “%AppData%” folder.

This video talks about the IcedID banking trojan, how it is executed, and ways to stay ahead of it. Watch the video to learn more—three minutes is all it takes!

&nsbp;
Conti ransomeware
Conti is a ransomware-as-a-service affiliate program associated with...
3.00
&nsbp;
Apache Log4j vulnerability
Logging is a fundamental feature of software. A flaw in Log4j...
3.00
&nsbp;
US government probes...
On April 29, 2022, the United States government...
3.00
&nsbp;
Qakbot malware
First discovered in 2007, Qakbot is widespread malware used for stealing information...
3.00
&nsbp;
Emotet malware
Originally developed as a banking trojan in 2014, Emotet malware was...
3.00
&nsbp;
Cobalt Strike
Created in 2012 by Raphael Mudge, Cobalt Strike is a remote...
3.00
&nsbp;
Mimikatz
Mimikatz is an open source application that allows users to view and save...
3.00
&nsbp;
REvil Ransomware
Belonging to the Cryptomix ransomware family, Clop ransomware...
3.00
&nsbp;
TrickBot
Originally designed by a group of sophisticated cybercriminals as a banking...
3.00
&nsbp;
Colonial Pipeline attack
Colonial Pipeline, a jet fuel and gasoline provider for the eastern United...
3.00
&nsbp;
Clop ransomware
A California-based information security and compliance firm, Qualys,...
3.00
&nsbp;
Mirai malware
Mirai malware infects devices that run on the ARC processor, turning...
3.00
&nsbp;
IcedID Malware
IcedID, aka BokBot, is a banking trojan-type malware that can be used...
3.00
&nsbp;
SocGholish
SocGholish is an initial access threat that uses drive-by-downloads that...
3.00
&nsbp;
Agent Tesla
First discovered in 2014, Agent Tesla is an advanced Remote Access...
3.00
&nsbp;
Shlayer Malware
First discovered in 2018, Shlayer malware has become one of the most...
3.00
&nsbp;
Gameover Zeus
Identified in September 2011, GameOver Zeus is a peer-to-peer (P2P) variant...
3.00
&nsbp;
LokiBot
First discovered in 2016, LokiBot is infostealing malware that...
3.00
&nsbp;
NanoCore
Sold in underground forums, the NanoCore remote access Trojan...
3.00
&nsbp;
Man-in-the-middle attacks
Man-in-the-middle (MitM) attacks take place...
3.00
&nsbp;
GandCrab ransomware
GandCrab ransomware encrypts victims files...
3.00
&nsbp;
FormBook malware
FormBook is an infostealer malware that steals...
3.00
&nsbp;
Shamoon virus
Shamoon is a dangerous malware program used in...
3.00
&nsbp;
Lapsus ransomware
Lapsus is a hacking group that gained noto...
3.00
&nsbp;
njRAT trojan
The njRAT, also known as Bladabindi, is...
3.00
&nsbp;
Phorpiex botnet
The Phorpiex Botnet, initially a worm...
3.00
&nsbp;
HawkEye keylogger
HawkEye keylogger is a formidable...
3.00
&nsbp;
Teslacrypt
TeslaCrypt is a ransomware variant...
3.00

Get the latest content delivered
right to your inbox!

Thank you for subscribing.

You will receive regular updates on the latest news on cybersecurity.

Please enter a business email id
US
By clicking on Keep me Updated you agree to processing of personal data according to the Privacy Policy.

Identity and access management

Unified service management

Unified endpoint management and security

IT operations management and observability

Security information and event management

Advanced IT analytics

Low-code app development

Cloud solutions for enterprise IT

IT management for MSPs

Active Directory management Manage, track, and secure Active Directory

Identity governance and administrationOrchestrate user identity management and access controls for Zero Trust

Privileged access managementControl and secure privileged access to critical enterprise systems

Enterprise and IT service managementDeliver a consistent employee experience across business functions

Customer service managementBuild a one-stop portal for customers with efficient account management

IT asset managementCentralize and automate the complete IT asset life cycle

SIEM Spot, investigate, and neutralize security threats

Log and compliance managementGain deeper visibility into security events and ensure compliance

Security auditingAudit Active Directory, cloud platforms and files to enhance your security posture

Endpoint management and protection platform (UEM and EPP)Secure and manage endpoints to protect your IT assets effectively

Endpoint managementAchieve intelligent IT device management with zero user intervention

Endpoint securityDefend against threat actors with proactive and reactive measures

Full-stack observability and digital experience monitoringAchieve end-to-end visibility, proactive issue resolution, and enhanced security

Network and server performance monitoringEnsure network, server, and storage reliability with AI-powered insights

IT incident managementEfficiently manage and resolve IT incidents while ensuring transparency

DNS and DHCP managementOptimize IP address and domain management

Cloud cost managementRight-size and take control of your cloud costs

IT analyticsConnect to your IT applications and visualize all facets of your IT

Cloud-native solutions for IT managementMonitor, manage, audit, and secure your multi-cloudand hybrid infrastructure

Business applications for ITBoost productivity and improve team collaboration

Custom solution builderBuild tailor-made apps to automate operations at your organization

Solutions for MSPsGrow your MSP business with scalable and secure IT management solutions

IcedID Malware

IcedID Malware

Conti ransomeware

Apache Log4j vulnerability

US government probes...

Qakbot malware

Emotet malware

Cobalt Strike

Mimikatz

REvil Ransomware

TrickBot

Colonial Pipeline attack

Clop ransomware

Mirai malware

IcedID Malware

SocGholish

Agent Tesla

Shlayer Malware

Gameover Zeus

LokiBot

NanoCore

Man-in-the-middle attacks

GandCrab ransomware

FormBook malware

Shamoon virus

Lapsus ransomware

njRAT trojan

Phorpiex botnet

HawkEye keylogger

Teslacrypt

Get the latest content delivered right to your inbox!

Thank you for subscribing.

Expert Talks

One-stop solution to all Log Management and Active Directory Auditing

Active Directory
management Manage, track, and secure Active Directory

Identity governance
and administrationOrchestrate user identity management and access controls for Zero Trust

Privileged access
managementControl and secure privileged access to critical enterprise systems

Enterprise and IT service
managementDeliver a consistent employee experience across business functions

Customer service
managementBuild a one-stop portal for customers with efficient account management

IT asset
managementCentralize and automate the complete IT asset life cycle

Network and server
performance monitoringEnsure network, server, and storage reliability with AI-powered insights

IT incident
managementEfficiently manage and resolve IT incidents while ensuring transparency

Cloud-native solutions for IT managementMonitor, manage, audit, and secure your multi-cloud
and hybrid infrastructure

Get the latest content delivered
right to your inbox!