Threats Tagged 'banking-trojan'

Eternidade Stealer is a banking Trojan distributed via WhatsApp hijacking and social engineering. It uses a Python-based WhatsApp worm to propagate malicious attachments and an MSI installer that deploys a Delphi-based banking Trojan. The campaign aims to steal banking credentials and conduct fraud. Exploitation does not require prior authentication but relies on user interaction to open malicious attachments. The malware targets Windows systems through MSI installers. The medium severity rating reflects moderate impact and exploitation complexity. European organizations with significant WhatsApp usage and Windows environments are at risk, especially financial institutions. Mitigations include user awareness training, restricting MSI execution, and monitoring WhatsApp traffic for suspicious activity. Countries with high WhatsApp penetration and financial sector importance, such as Germany, France, Italy, Spain, and the UK, are most likely affected. The threat poses a medium risk due to its reliance on social engineering and targeted banking fraud objectives.

MediumMalwareGermanyFranceItaly+4#infosecnews#reddit#trojan

New Android Banking Trojan “Klopatra” Uses Hidden VNC to Control Infected Smartphones Source: https://thehackernews.com/2025/10/new-android-banking-trojan-klopatra.html

HighMalwareGermanyFranceItaly+7#infosecnews#reddit#high-priority

Klopatra: exposing a new Android banking trojan operation with roots in Turkey | Cleafy LABS Source: https://www.cleafy.com/cleafy-labs/klopatra-exposing-a-new-android-banking-trojan-operation-with-roots-in-turkey

MediumMalwareGermanyFranceItaly+4#netsec#reddit#trojan

Android Droppers Now Deliver SMS Stealers and Spyware, Not Just Banking Trojans Source: https://thehackernews.com/2025/09/android-droppers-now-deliver-sms.html

HighNewsGermanyFranceItaly+5#infosecnews#reddit#high-priority

Malicious apps with +19M installs removed from Google Play because spreading Anatsa banking trojan and other malware Source: https://securityaffairs.com/181528/malware/malicious-apps-with-19m-installs-removed-from-google-play-because-spreading-anatsa-banking-trojan-and-other-malware.html

MediumMalwareGermanyFranceItaly+5#infosecnews#reddit#malware

ERMAC V3.0 Banking Trojan Source Code Leak Exposes Full Malware Infrastructure Source: https://thehackernews.com/2025/08/ermac-v30-banking-trojan-source-code.html

HighMalwareGermanyFranceItaly+7#infosecnews#reddit#high-priority

Coyote Banking Trojan Becomes First to Exploit Microsoft UI Automation in Active Attacks on Banks and Crypto Platforms Source: https://hackread.com/coyote-trojan-use-microsoft-ui-automation-bank-attacks/

HighVulnerabilityGermanyFranceNetherlands+5#infosecnews#reddit#high-priority