From Wikipedia, the free encyclopedia
Jump to navigation Jump to search
SubtypeBanking trojan
Author(s)Necurs Maksim Yakubets

Dridex also known as Bugat and Cridex is a form of malware that specializes in stealing bank credentials via a system that utilizes macros from Microsoft Word.[5]

Notoriously known as one of the most active financial ecrime adversaries today, the CrowdStike coined INDRIK SPIDER is responsible for the infamous Dridex malware, the successor of Cridex.[6] Dridex, the more notable successor of Cridex has become one of the most prevalent sources of infection. Using the background of Cridex and open-source software, we will be reviewing the original malware and its recent variants for proposed risk management.

The targets of this malware are Windows users who open an email attachment in Word or Excel, causing macros to activate and download Dridex, infecting the computer and opening the victim to banking theft.

The primary objective of this software is to steal banking information[7] from users of infected machines to immediately launch fraudulent transactions. Bank information for the software installs a keyboard listener and performs injection attacks. During 2015, theft caused by this software were estimated at £20 million in the United Kingdom and $10 million in the United States. By 2015, Dridex attacks had been detected in more than 20 countries. In early September 2016, researchers spotted initial support for targeting cryptocurrency wallets.[8]

In December 2019, US authorities filed charges against two suspects believed to have created the Dridex malware, including the group's alleged leader.[9]

See also[edit]


  1. ^ https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?
  2. ^ https://blog.malwarebytes.com/detections/trojan-dridex/
  3. ^ https://www.trendmicro.com/vinfo/us/threat-encyclopedia/search/dridex
  4. ^ https://fortiguard.com/encyclopedia/virus/8080330
  5. ^ "Someone Hijacks Botnet Network & Replaces Malware with an Antivirus". 2016-02-04. Retrieved 2017-01-11.
  6. ^ Cole, Eric (2013), "Protecting Your Data", Advanced Persistent Threat, Elsevier, pp. 99–121, ISBN 978-1-59749-949-1, retrieved 2021-06-07
  7. ^ Jeremy Kirk (2016-01-19). "Dridex banking malware adds a new trick". PCWorld. Retrieved 2017-01-11.
  8. ^ Catalin Cimpanu (2016-09-07). "Dridex Banking Trojan Will Soon Target Crypto-Currency Wallets". Softpedia. Retrieved 2017-01-11.
  9. ^ Cimpanu, Catalin (December 5, 2019). "US charges two members of the Dridex malware gang". ZDNet. Retrieved December 8, 2019.