'Grandoreiro' Malware Resurfaces With Mexico Campaign

The Grandoreiro banking Trojan, a 12-year-old malware initially developed in Brazil, has resurfaced with a new campaign targeting users in Mexico and expanding its reach to North America and Europe. Operators are utilizing sophisticated techniques, including a zip archive disguised as an invoice and a repurposed file-management tool, to deliver the malware and evade detection. The campaign highlights the malware's ongoing evolution and adaptation, demonstrating a renewed focus on stealth and anti-analysis measures, despite a decrease in overall activity.