The Mekotio banking trojan is a sophisticated piece of malware that has been active since at least 2015, primarily targeting Latin American countries with the goal of stealing sensitive information — particularly banking credentials — from its targets.
Originating in the Latin American region, it has been particularly prolific in Brazil, Chile, Mexico, Spain, and Peru. Furthermore, Mekotio seems to share a common origin with other notable Latin American banking malware such as Grandoreiro, which was disrupted by law enforcement earlier this year. Mekotio is often delivered through phishing emails, employing social engineering to trick users into interacting with malicious links or attachments. Trend Micro recently seen a surge in attacks involving Mekotio among their customers.
Read more…
Source: Trend Micro
Related:
- Latitude Financial refuses to pay cyber-attack ransom demands
April 11, 2023
Finance company Latitude Financial says it will not give in to ransom demands by cyber criminals behind one of Australia’s largest cyber-attacks. Almost 8 million driver’s licenses of Australian and New Zealand customers have been stolen including more than 6 million customer records. Read more… Source: MSN News
- Financial cyberthreats in 2022
March 29, 2023
Financial gain remains the key driver of cybercriminal activity. In the past year, we’ve seen multiple developments in this area – from new attack schemes targeting contactless payments to multiple ransomware groups continuing to emerge and haunt businesses. However, traditional financial threats – such as banking malware and financial phishing, continue to take up a ...
- 8th Edition Connected Banking Summit Southern Africa – Formerly Africa Digital Banking Summit-Innovation and Excellence Awards
March 24, 2023
Accelerating Digital Inclusion and Sustainable Transformation The 8th Edition of the Connected Banking Summit Southern Africa is set to take place on May 24, 2023, in Johannesburg, South Africa, bringing together top executives, experts, and leaders from the banking and financial services industry. The summit, organized by the International Center for Strategic Alliances (ICSA), is a ...
- Australian FinTech takes itself offline to deal with cyber incident that caused data leak
March 21, 2023
Latitude Financial has blamed a supplier for leaking creds that caused vast PII leak Australian outfit Latitude Financial has taken itself offline, and even stopped serving customers, while it tries to clean up an attack on its systems. The listed company last week called a halt to trade in its shares and filed news that it ...
- Bee-Ware of Trigona, An Emerging Ransomware Strain
March 16, 2023
Trigona ransomware is a relatively new strain that security researchers first discovered in late October 2022. By analyzing Trigona ransomware binaries and ransom notes obtained from VirusTotal, as well as information from Unit 42 incident response, we determined that Trigona was very active during December 2022, with at least 15 potential victims being compromised. Affected ...
- 7th Edition Connected Banking Summit East Africa – Innovation & Excellence Awards 2023 Concludes with Resounding Success
March 13, 2023
The Summit brought together the best and brightest minds in the banking, financial services, fintechs and techfin sectors. The event, which took place on 7th March 2023, featured insightful speakers, award-winning companies, and top-notch sponsors. Attendees were treated to a range of informative sessions, covering topics such as digital transformation, cybersecurity, and risk management. The keynote ...