According to Bleeping Computer and Vitali Kremez, LightBot is a compact reconnaissance tool suspected to be used to identify high-value targets for potential follow-up ransomware attacks.
|2020-11-20 ⋅ Bleeping Computer ⋅ |
LightBot: TrickBot’s new reconnaissance malware for high-value targets
|2020-11-19 ⋅ Twitter (@VK_intel) ⋅ |
Tweet on Trickbot Group pushing LIGHTBOT powershell script to gather information about AD Server
There is no Yara-Signature yet.