Trickbot Malware Now Also Steals Passwords From Apps, Web Browsers

Once known as a run-of-the-mill banking trojan with phishing abilities, Trickbot has been upgraded lately with new malware modules designed to expand its capabilities and allow the actors behind it to collect even more data from compromised machines. 

As reported by Trend Micro, screen-locking and detection evasions were added to Trickbot in March, and this month its authors added a new password grabber module (aka PasswordGrabber) that makes it possible to collect and exfiltrate passwords from infected systems.

Moreover, Trickbot now can scan for passwords in the Microsoft Outlook, Filezilla, and WinSCP programs and the Google Chrome, Mozilla Firefox, Internet Explorer, and Microsoft Edge web browsers.