Brazilian Actors Expand Financial Malware Campaigns to Attack Spanish-Speaking Countr

[silversurfer]

A detailed analysis from security researchers shows how Brazilian financial malware is spreading beyond national boundaries to attack banks in Spanish-speaking countries through South and Latin America, and Portugal and Spain in Europe. 

Brazilian hackers are often overshadowed in the media by news about Russian, Chinese, Iranian and North Korean hackers -- but new research from Cybereason suggests growing technical expertise and aspiration stemming from Brazil.

Assaf Dahan, Sr. Director, head of threat hunting at Cybereason, and Cybereason security analyst Joakim Kandefelt, have tracked and analyzed recent campaigns, and have discovered a multi-stage stealthy financial malware campaign that flies under the radar and is difficult to detect (Cybereason used AI-based behavioral detection). The research has now been published.

They also discovered that the campaign is not limited to attacking banks in Portuguese-speaking Brazil, but has widely spread to Spanish-speaking countries. "These countries," note the researchers, "include Argentina, Bolivia, Chile, Venezuela and Spain. Cybereason found earlier samples of Brazilian malware targeting more countries, such as Mexico, Portugal, Colombia and other Latin American countries. 

Source: https://www.securityweek.com/brazilian-f...boundaries