Ramnit_Trojan - description

Ramnit Trojan spreads through compromised websites that redirect visitors with deceptive messages. These messages claim users need to update Adobe Flash Player or Chrome browser, but instead install the Ramnit banking trojan.

Flowmon ADS detects access to compromised sites, redirection chains, and communication with the attacker's command and control server (trumplines[.]bit). Traffic to this domain indicates device infection.