Skip to main content
← All Articles

Tag

#Banking Trojan

13 articles

Advertisement

Grandoreiro Banking Trojan: New Evasion Tactics in Mexico
MEDIUM
Malware

Grandoreiro Banking Trojan: New Evasion Tactics in Mexico

Grandoreiro banking Trojan resurfaces in Mexico, employing advanced evasion tactics after a law enforcement takedown to target financial users.

Runtime Rebel Intel
4 min read · Aug 24, 2026
HIGH
Malware

Banking Trojans Manic, Grandoreiro, ToxicPanda 2.0 Active

New and updated banking trojans Manic, Grandoreiro, and ToxicPanda 2.0 are actively targeting financial users globally, stealing credentials and data.

Runtime Rebel Intel
5 min read · Aug 22, 2026
Brazilian Banking Trojan Expansion into Portugal Targets Businesses
MEDIUM
Malware

Brazilian Banking Trojan Expansion into Portugal Targets Businesses

Portuguese businesses face increased risk from Brazilian banking trojans leveraging shared language for phishing and credential theft.

Runtime Rebel Intel
4 min read · Jul 23, 2026
SCMBANKER Malware: Analyzing ClickFix Lures Targeting Mexican Banks
HIGH
Malware

SCMBANKER Malware: Analyzing ClickFix Lures Targeting Mexican Banks

Elastic Security Labs tracks REF6045, deploying SCMBANKER malware via fake ClickFix CAPTCHA pages to compromise Mexican banking users.

Runtime Rebel Intel
4 min read · Jul 8, 2026
Ousaban Banking Trojan: Phishing Lures Target Iberian Bank Users
HIGH
Malware

Ousaban Banking Trojan: Phishing Lures Target Iberian Bank Users

Ousaban, a Brazilian banking trojan, targets Windows users in Spain and Portugal via fake PDF phishing lures, aiming to steal financial credentials.

Runtime Rebel Intel
4 min read · Jul 1, 2026
HIGH
Malware

Rokarolla Android Malware Targets 217 Financial Apps

New Rokarolla Android banking trojan targets 217 financial and crypto applications. Learn its TTPs and how to protect mobile banking apps from malware.

Runtime Rebel Intel
4 min read · Jun 16, 2026

Advertisement

Grandoreiro and BTMOB RAT Campaigns Target Windows and Android Users
HIGH
Threat Intel

Grandoreiro and BTMOB RAT Campaigns Target Windows and Android Users

Analysis of Grandoreiro and BTMOB malware campaigns targeting financial sectors in Spain, Portugal, and Latin America through Windows and Android platforms.

Runtime Rebel Intel
4 min read · May 27, 2026
HIGH
Malware

TrickMo Android Trojan Uses TON Blockchain for Covert C2

TrickMo Android banking malware adopts The Open Network (TON) blockchain for decentralized C2, targeting European users via accessibility service abuse.

Runtime Rebel Intel
3 min read · May 11, 2026
TCLBANKER Malware: Brazilian Trojan Spreads via WhatsApp and Outlook
HIGH
Malware

TCLBANKER Malware: Brazilian Trojan Spreads via WhatsApp and Outlook

TCLBANKER (REF3076) targets 59 financial platforms using the SORVEPOTEL worm. Learn how to detect and mitigate this evolving Brazilian banking trojan.

Runtime Rebel Intel
4 min read · May 8, 2026
HIGH
Malware

TCLBanker Malware Targets Fintech via WhatsApp and Outlook

TCLBanker malware uses trojanized Logitech AI installers to target 59 banking apps and spreads automatically via WhatsApp and Outlook messages.

Runtime Rebel Intel
4 min read · May 8, 2026
Casbaneiro Banking Trojan: Evasion and Lateral Movement in Latin America
HIGH
Malware

Casbaneiro Banking Trojan: Evasion and Lateral Movement in Latin America

Analyzing Casbaneiro, a sophisticated banking Trojan employing advanced evasion, process injection, and network worming to target financial institutions and users in…

Runtime Rebel Intel
4 min read · Apr 2, 2026
Perseus Android Banking Malware Targets Notes Apps for Data Theft
HIGH
Malware

Perseus Android Banking Malware Targets Notes Apps for Data Theft

Researchers discover Perseus, a new Android banking malware evolved from Cerberus, targeting notes apps to facilitate device takeover and financial fraud.

Runtime Rebel Intel
3 min read · Mar 19, 2026
VENON Malware: Rust-Based Banking Trojan Targets Brazilian Banks
HIGH
Malware

VENON Malware: Rust-Based Banking Trojan Targets Brazilian Banks

A new Rust-based malware called VENON is targeting 33 Brazilian banks with credential-stealing overlays, signaling a shift in Latin American cybercrime TTPs.

Runtime Rebel Intel
4 min read · Mar 12, 2026