Learning from the Dridex Malware - Adopting an Effective Strategy

Dridex is a malware that targets financial industry to steal bankingcredentials and personal information to gain financial records of a user. Itleverages on macro documents and social engineering for delivering the malwareonto the system. The attacker is seen constantly sending waves of mail spam andcreating new updates frequently. With enough determination and time from theattacker, the attacker can slowly learn about the defense that an organizationhas in place and eventually succeeded in penetrating them. Through learning theDridex malware traffic when it updates, the organization can learn thedirection of the malware trend. The information gained can be used to adopt aneffective counter strategy to be at the advantage position in the zero sumgame.