SecurityOnlineDdos
Banana RAT hits Brazilian banks via fileless, live session hijack
Part of the SHADOW-WATER-063 story · since 25 May
- Mon 25 May, 07:31 UTC. SecurityOnline, first report. Banana RAT hits Brazilian banks via fileless, live session hijack. This article, 1st of 1.
The article discusses the Banana RAT (Remote Access Trojan), attributed to a cybercriminal group known as SHADOW-WATER-063, targeting Brazilian financial institutions. The trojan employs advanced strategies for financial theft, utilizing a fileless execution model that operates primarily in memory to evade detection.
Key features include an operator-driven control system allowing live manipulation of banking sessions, deceptive overlays to mislead users, and specialized modules for intercepting cryptocurrency transactions. TrendAI emphasizes the need for financial institutions to adopt robust behavioral profiling and monitor for unusual PowerShell activity to combat this sophisticated threat.
How the story developed
1 article from 1 outlet since 25 May. Quiet since 25 May. This was the first report.
- Mon 25 May, 07:31 UTC. SecurityOnline, first report. Banana RAT hits Brazilian banks via fileless, live session hijack. This article, 1st of 1.
- No CVE
- Larger: an outlet’s first report
- Coverage over time
- Quiet time, folded
Show all 1 articles as a listHide the list
- Mon 25 MayDay 01
- Banana RAT hits Brazilian banks via fileless, live session hijack07:31 · SecurityOnline · First report · This article, 1st of 1