Pikabot Malware Spreading Through Phishing Campaigns

Trend Micro reports that the actor known as “Water Curupira” is conducting widespread phishing campaigns distributing the multi-stage Pikabot loader, which decrypts and loads DLL payloads to install backdoors and ultimately facilitate Black Basta ransomware and other malware; attackers leverage thread-hijacking of email conversations and malicious attachments to increase success.