A sophisticated phishing campaign is targeting Spanish-speaking users in organizations across Latin America and Europe, aiming to deliver Windows banking trojans like Casbaneiro, also known as Metamorfo, via another malware called Horabot.
The campaign has been attributed to a Brazilian cybercrime threat actor tracked as Augmented Marauder and Water Saci, which was first documented by Trend Micro.
The attackers are using dynamic PDF lures to trick victims into installing the malware, highlighting the evolving nature of phishing tactics.
The use of Casbaneiro and Horabot malware in this campaign demonstrates the threat actor’s ability to adapt and use multiple tools to achieve their goals.
As the campaign continues to target organizations in Latin America and Europe, it is essential for users to be aware of the risks associated with phishing emails and to take necessary precautions to protect themselves.
By staying informed about the latest phishing tactics and threats, users can help prevent the spread of malware like Casbaneiro and protect their sensitive information.
Source: Original Article
