Grandoreiro Banking Trojan Archives

Grandoreiro Banking Trojan Hits Brazil as Smishing Scams Surge in Pakistan

17Jun

By RBNo Comments

News

Grandoreiro Banking Trojan Hits Brazil as Smishing Scams Surge in Pakistan

The Smishing Triad is a threat actor that has expanded its reach outside the United States, the United Arab Emirates, Saudi Arabia, and the European Union. Its current target is Pakistan. Resecurity claimed in a study earlier this week that the group's most recent strategy entails delivering malicious messages to mobile carrier customers via iMessage and SMS on behalf of Pakistan Post. The intention is to steal their financial and personal data. The threat actors, who are thought to speak Chinese, are well-known for using stolen datasets that are sold on the dark web to send phony text messages that lure receivers into clicking on links pretending to tell them that their product has not arrived as expected and that they should alter their address read more Grandoreiro Banking Trojan...

Grandoreiro Banking Trojan Resurfaces, Targeting Over 1,500 Banks Worldwide

After being taken down by law enforcement in January, the threat actors responsible for the Grandoreiro banking malware, which targets Windows, have launched a global campaign to resurface since March 2024. Targeting more than 1,500 institutions worldwide, the massive phishing attempts are most likely enabled by other hackers through the use of malware-as-a-service (MaaS) models. These nations include Central and South America, Africa, Europe, and the Indo-Pacific. stated IBM X-Force. Grandoreiro's expansion is probably a change in tactics following attempts by Brazilian authorities to shut down its infrastructure, even though it is best known for its focus on Latin America, Spain, and Portugal. Significant enhancements to the malware itself, indicating ongoing development, go ha...

Brazilian Feds Dismantle Grandoreiro Banking Trojan, Arresting Top Operatives

Several Brazilian operators responsible for the Grandoreiro malware have been apprehended as a result of a law enforcement investigation conducted in Brazil. In the states of São Paulo, Santa Catarina, Pará, Goiás, and Mato Grosso, the Federal Police of Brazil reported that it had executed 13 search and seizure warrants in addition to five temporary arrest warrants. The Slovak cybersecurity company ESET, which contributed more support to the endeavor, claimed to have found a network protocol design vulnerability in Grandoreiro that enabled it to recognize the victimology patterns. Grandoreiro is one of several banking trojans from Latin America that mostly target nations like Spain, Mexico, Brazil, and Argentina read more Brazilian Feds Dismantle Grandoreiro Banking Trojan Arrest...