From gbhackers.com
Researchers observed a new wave of infamous Trickbot Malware campaign via a dozen of malicious documents and infect the Windows users by abusing Remote Desktop ActiveX Control.
TrickBot is one of the top modular banking malware that primarily targets financial information of users’ and also it acts as a dropper for other malware.
Remote Desktop ActiveX Control recently introduced by Microsoft for Windows 10 that helps vendors to constantly update OS to protect the system.
But this feature is abusing in this attack was utilized to automatically execute the malicious Macro that contains the OSTAP javascript downloader.
Researchers believe that other groups also misusing the same, and earlier controls although with a slightly different technique.