Skip to content
MalwareWiki

Malware

Anchor

Anchor is a sophisticated backdoor served as a module to a subset of TrickBot installations.

Anchor is a Windows malware family operated by WIZARD SPIDER.

Background

Anchor is an advanced backdoor delivered as a module to only a portion of TrickBot infections. Active since August 2018, it is reserved for high-profile targets rather than distributed broadly. Because its C2 communication mechanism closely mirrors that of early TrickBot, many researchers attribute it to the same developers.

Source: Malpedia (Fraunhofer FKIE).