We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
TrojanDownloader:Win32/Truebot
Aliases: No associated aliases
Summary
TrueBot is a malware downloader family created by a Russian-speaking hacking group known as Silence. When launched, it collects system information, like computer name, local network name and screen captures. TrueBot deploys additional payloads, like Cobalt Strike.
Microsoft Defender Antivirus automatically removes threats as they are detected. However, further investigation is required to determine if there were any other malicious files dropped on the compromised host and if they successfully executed.
You can also visit our advanced troubleshooting page or search the Microsoft virus and malware community for more help.
