THE article discusses the resurgence of the Grandoreiro banking Trojan, which continues to threaten banking customers in Latin America following a law enforcement disruption of its operations. The malware is now targeting users in Mexico through a new campaign that utilizes DLL sideloading and legitimate applications to evade detection. Acronis reports a focus on stealth, with advanced anti-analysis features to prevent security interference.
Initially developed in 2016, Grandoreiro has evolved and expanded its reach, now targeting over 1,700 banks across 45 countries. The attackers disguise their malware within zip files containing legitimate-looking documents, indicating a shift towards meticulous evasion tactics. Despite diminished activity, this malware retains its operational capabilities and adaptability.