Last week, Microsoft announced a disruption targeting the botnet Trickbot. Trickbot is a network of servers and infected devices run by criminals responsible for a wide range of nefarious activity including the distribution of ransomware. The disruption is intended to disable Trickbots infrastructure and make it difficult for its operators to enable ransomware attacks, which have been identified as one of the biggest threats to the upcoming U.S. elections. As expected, the criminals operating Trickbot scrambled to replace the infrastructure we initially disabled. We’ve now disabled all but one of these new servers.”]
Source: https://blogs.microsoft.com/on-the-issues/2020/10/20/trickbot-ransomware-disruption-update/