New Grandoreiro Banking Malware Variants Emerge with Advanced Tactics to Evade Detection
Who:
Threat Actor: Operators of the Grandoreiro banking malware, a Brazilian banking trojan.
Target: Banking customers, particularly in Mexico, Latin America (LATAM), and Europe.
What:
Malware Evolution: New variants of Grandoreiro have adopted advanced tactics like domain generation algorithms (DGA), encryption, mouse tracking, and CAPTCHA barriers to evade detection.
Attack Methods: Delivered primarily through phishing emails and malicious ads, Grandoreiro uses large files disguised as legitimate software to bypass security measures, gathering credentials and monitoring user activity.
Impact:
Global Financial Threat: Capable of stealing credentials from over 1,700 financial institutions across 45 countries, the malware poses a significant risk to banking systems.
Evasion Tactics: The malware’s continuous evolution helps it avoid modern security systems, making it a persistent threat despite law enforcement crackdowns.
Read the full article HERE