A version of TrickBot spotted recently shows interest in Windows system reliability and performance information. Microsoft runs a Reliability Analysis Component (RAC) on Windows operating systems to supply the Reliability Monitor with details about software installations, upgrades, errors from the operating systems and applications, as well as hardware-related issues. TrickBot sends TrickBot with messages purporting to be from Lloyds Bank using the address ‘donotreply@lloydsbankdocs.com,’ which is easy to mistake for a genuine email from the bank.
Source: https://www.bleepingcomputer.com/news/security/trickbot-banking-trojan-starts-stealing-windows-problem-history/