Anubis

Anubis, also known as IcedID or Bokbot, is a sophisticated piece of malware primarily functioning as a banking trojan. It was first discovered by X-Force in September 2017 and has since evolved to target a wide range of financial applications. Notably, Anubis has consistently ranked among the top five most prevalent malware families, accounting for 11.24% of infections. This malware is particularly notorious for its ability to infect systems through suspicious downloads, emails, or websites, often without the user's knowledge. Once inside, it can steal personal information, disrupt operations, or even hold data hostage for ransom. In October, an incident involving the IcedID banking Trojan saw a forked variant infection with BackConnect, Anubis VNC, CobaltStrike, and ConnectWise ScreenConnect. Remarkably, "hands on the keyboard" activity was detected approximately 95 minutes after initial infection, indicating swift and aggressive action by the attackers. Numerous companies, including Microsoft Corporation, McAfee, Symantec, and Trend Micro, have been involved in efforts to combat this threat. Anubis has also emerged as a significant threat in the mobile malware arena, especially targeting Android devices. It has remained the most prevalent mobile malware, followed by AhMyth and Hiddad. Over time, Anubis has evolved beyond its initial design as a banking Trojan, incorporating Remote Access Trojan (RAT) functionality, keylogging, audio recording capabilities, and ransomware features. As such, it represents a multi-faceted and persistent cybersecurity threat.