Mekotio Strikes Again: Latin American Banks Under Siege by Evolving Trojan

Mekotio, a banking trojan targeting Latin America, is making a comeback. Using phishing emails, it steals banking credentials through fake pop-ups and other malicious tactics. Trend Micro highlights its persistent threat to financial institutions in the region.

Hot Take:

Looks like Latin American banks are getting a double whammy: Mekotio and Red Mongoose Daemon are the Bonnie and Clyde of the cyber world, swiping banking creds like it’s a full-time job!

Key Points:

  • Mekotio is a banking trojan targeting Latin American countries, active since 2015.
  • Uses tax-themed phishing emails to deploy malware through MSI installer files.
  • Steals banking credentials via fake pop-ups, and captures screenshots, keystrokes, and clipboard data.
  • Red Mongoose Daemon is a new trojan with similar objectives and tactics, focusing on Brazilian users.
  • Both trojans aim to gain unauthorized access to bank accounts and perform fraudulent transactions.

Membership Required

 You must be a member to access this content.

View Membership Levels
Already a member? Log in here