Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-06 02:58:23 UTC
Home > List all groups > List all tools > List all groups using tool TrickMo
 Tool: TrickMo
Names TrickMo
Category Malware
Type Banking trojan, Loader
Description
(IBM) IBM X-Force researchers analyzed an Android malware app that’s likely being
pushed to infected users by the TrickBot Trojan. This app, dubbed “TrickMo” by our
team, is designed to bypass second factor and strong authentication pushed to bank
customers when they need to authorize a transaction.
While it’s not the first of its kind, this Android malware app is more sophisticated than
similar apps and possesses interesting features that enable its operators to steal
transaction authorization codes from victims who download the app.
Information
MITRE ATT&CK Malpedia AlienVault OTX Last change to this tool card: 27 December 2024
Download this tool card in JSON format
All groups using tool TrickMo
Changed Name Country Observed
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=6bedcca0-561d-48a0-942f-bf68911e53d8
Page 1 of 2

APT groups
  Wizard Spider, Gold Blackburn 2014-May 2025
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=6bedcca0-561d-48a0-942f-bf68911e53d8
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=6bedcca0-561d-48a0-942f-bf68911e53d8
Page 2 of 2