A new variant of the banking trojan Dridex is part of a sophisticated phishing attack targeting users of the cloud-based accounting firm Xero.

Dridex has undergone a massive update and now sports a new injection method for evading detection based on the technique known as AtomBombing.