The researcher, who identified himself only as MalwareTech, is a 22-year-old from southwest England who works for Kryptos logic, a Los Angeles-based threat-intelligence company.
The EIF supports European small and medium-sized businesses by helping them to access development finance, while the Luxembourg Future Fund is a EUR 150 million sovereign investment fund which aims to invest in the sustainable development of the Luxembour
The attack started with a standard phishing attack in order to gather usernames, passwords, phone numbers, and bank account information from the victims.
The tricks include phishing email campaigns, pay per click ads (often for competitors’ services), for-profit survey sites and affiliate program abuse, or more nefarious content like ransomware and drive-by download campaigns.
TrickBot is sharpening its focus on business banking, too, adding some rare finds to its more usual hit list.
The project was targeted to take advantage of the Japanese government’s loosening of regulations of the use of fintech in businesses, and is expected to launch in spring with an eye to begin operations in July.