Threats tagged 'banking-trojan'

Eternidade Stealer is a banking Trojan distributed via WhatsApp hijacking and social engineering. It uses a Python-based WhatsApp worm to propagate malicious attachments and an MSI installer that deploys a Delphi-based banking Trojan. The campaign aims to steal banking credentials and conduct fraud. Exploitation does not require prior authentication but relies on user interaction to open malicious attachments. The malware targets Windows systems through MSI installers. The medium severity rating reflects moderate impact and exploitation complexity. European organizations with significant WhatsApp usage and Windows environments are at risk, especially financial institutions. Mitigations include user awareness training, restricting MSI execution, and monitoring WhatsApp traffic for suspicious activity. Countries with high WhatsApp penetration and financial sector importance, such as Germany, France, Italy, Spain, and the UK, are most likely affected. The threat poses a medium risk due to its reliance on social engineering and targeted banking fraud objectives.

Malware#infosecnews#redditGermany+6

New Android Banking Trojan “Klopatra” Uses Hidden VNC to Control Infected Smartphones Source: https://thehackernews.com/2025/10/new-android-banking-trojan-klopatra.html

Malware#infosecnews#redditGermany+9

Klopatra: exposing a new Android banking trojan operation with roots in Turkey | Cleafy LABS Source: https://www.cleafy.com/cleafy-labs/klopatra-exposing-a-new-android-banking-trojan-operation-with-roots-in-turkey

Malware#netsec#redditGermany+6

Android Droppers Now Deliver SMS Stealers and Spyware, Not Just Banking Trojans Source: https://thehackernews.com/2025/09/android-droppers-now-deliver-sms.html

News#infosecnews#redditGermany+7

Malicious apps with +19M installs removed from Google Play because spreading Anatsa banking trojan and other malware Source: https://securityaffairs.com/181528/malware/malicious-apps-with-19m-installs-removed-from-google-play-because-spreading-anatsa-banking-trojan-and-other-malware.html

Malware#infosecnews#redditGermany+7

ERMAC V3.0 Banking Trojan Source Code Leak Exposes Full Malware Infrastructure Source: https://thehackernews.com/2025/08/ermac-v30-banking-trojan-source-code.html

Malware#infosecnews#redditGermany+9

Coyote Banking Trojan Becomes First to Exploit Microsoft UI Automation in Active Attacks on Banks and Crypto Platforms Source: https://hackread.com/coyote-trojan-use-microsoft-ui-automation-bank-attacks/