ESET Research: Latin American banking trojans spread to Europe at the height of activity

Latin American banking trojans are an ongoing, evolving threat and ESET has recently seen some of their biggest campaigns to date. They target mainly Brazil, Spain, and Mexico. Mekotio and Grandoreiro expanded to Europe, mainly targeting Spain but also Italy, France and Belgium. There are at least eight different malware families still active. In June … More ESET Research: Latin American banking trojans spread to Europe at the height of activity

ESET Research uncovers Janeleiro, a new banking trojan attacking corporate users in Brazil

ESET Research has uncovered a new banking trojan that has been targeting corporate users in Brazil since at least 2019 across many sectors, including engineering, healthcare, retail, manufacturing, finance, transportation, and governmental institutions. ESET dubbed the new threat Janeleiro. It attempts to deceive its victims with pop-up windows designed to look like the websites of … More ESET Research uncovers Janeleiro, a new banking trojan attacking corporate users in Brazil

Vadokrist: A wolf in sheep’s clothing

ESET researchers published today another installment in their ongoing series of Latin American banking trojans. Since 2018 they have investigated Vadokrist, a trojan that is specifically focused on Brazil. The malware utilizes backdoor functionality and is distributed via malicious spam emails targeting financial institutions. Unlike most other Latin American banking trojans, Vadokrist does not collect … More Vadokrist: A wolf in sheep’s clothing

Grandoreiro: How engorged can an EXE get?

Another in our occasional series demystifying Latin American banking trojans In this installment of our series, we introduce Grandoreiro, a Latin American banking trojan targeting Brazil, Mexico, Spain and Peru. As such, it shows unusual effort by its authors to evade detection and emulation, and progress towards a modular architecture. We have seen Grandoreiro being … More Grandoreiro: How engorged can an EXE get?