S0266 - TrickBot

Threat Intelligence Feed

Feed ID: 8F-69IkBgHqbhTfSEn26

TrickBot is a Trojan spyware program written in C++ that first emerged in September 2016 as a possible successor to Dyre. TrickBot was developed and initially used by Wizard Spider for targeting banking sites in North America, Australia, and throughout Europe; it has since been used against all sectors worldwide as part of "big game hunting" ransomware campaigns.


Select the way you want to use this feed:


Download Feed

Download this Threat Intelligence feed directly or through code:

  • Several different formats (Simple IoC lists or full context JSON)
  • Code snippets available on how to download it in different programming languages.


  • Integrate Feed

    Automate your Security Operations by integrating this feed data real time into your Security Stack:

  • Onboard Maltiverse Feeds on security devices (SIEM, SOAR, Firewalls, etc)
  • Create your own feed and deploy new IoCs insantly across you security devices.


  • Feed composition

    Feed composition by type

    IP Address Hostname URL Sample Total

    Feed ingestion over time (now-365d)

    Feed composition by type

    results found for: “classification:malicious AND blacklist.external_references.external_id:"S0266"”