AllaKore RAT Malware Targeting Mexican Firms with Financial Fraud Tricks
A fresh spear-phishing effort targeting Mexican financial institutions is circulating, disseminating a customized AllaKore RAT remote access trojan.
The behavior was attributed by the BlackBerry Research and Intelligence Team to an unidentified financially motivated threat actor operating in Latin America. The campaign started in 2021, at the latest.
The Canadian company stated in an investigation released earlier this week that "Lures use Mexican Social Security Institute (IMSS) naming schemas and links to legitimate, benign documents during the installation process."
"The AllaKore RAT payload is heavily modified to allow the threat actors to send stolen banking credentials and unique authentication information read more AllaKore RAT Malware Targeting Mexican Firms with Financia...