Area 1 Security: Phishing campaign using a message saying that the recipient has been fired from their job is attempting to plant two malware strains – Bazar and Buer. The Bazar backdoor helps deliver other malicious code, such as ransomware, to victims’ devices and networks. The Buer loader has previously been used to deliver Ryuk ransomware to victims, according to the security firm Sophos. Microsoft, the U.S. government and others took the extraordinary step of disrupting Trickbot’s infrastructure last month.”]
Source: https://www.cuinfosecurity.com/phishing-campaign-tied-to-trickbot-gang-a-15346