Our latest banking malware analysis

Analyzing a Biometric Banking Malware: Camubot

David García
October 28, 2019
Mobile version
Cybersecurity, banking malware

We know that today there is malware related to all kinds of malicious activities. This includes banking malware, which is designed to rob banking credentials. This type of malware can be found in almost all platforms and operating systems, whether desktop or mobile.

New version of Cerberus targets Spanish and Latin American entities

David García
October 17, 2019
Mobile version
banking malware

At the beginning of September there were new samples of the Android 'Cerberus' banking Trojan detected. This banking malware has been gaining popularity little by little since its launch in June 2019.

Analyzing the risk of banking malware in Android vs. iOS

David Morán
October 7, 2019
Mobile version
Cybersecurity, banking malware

It is common nowadays to hear news about new families of banking malware for Android devices and how they work. However, the same cannot be said for iOS devices. This may lead us to ask “Is there malware for iOS? And banking malware?

New Host Modifier type malware that affects banks in Latin America

David García
September 27, 2019
Mobile version
banking malware

On August 29, 2019, a new variety of banking Trojans affecting Latin American banks, especially Peruvian entities, reached our malware analysis systems.

Overlays: The preferred technique for bankers in Android

David Morán
September 16, 2019
Mobile version
banking malware

Nine years have passed since the first banking malware for Android mobile devices was discovered. It was 2010, and just a year and a half had passed since the launch of HTC Dream, the first smartphone with Android as its operating system.

BANKER RTC PORTAL, attacks Latin American and European banks

David García
August 8, 2019
Mobile version
banking malware

At buguroo we have been detecting a massive fraud campaign targeting banks in Latin America and Europe since the end of last month, July 2019. Its objective is to steal money and credentials, and it is being executed using a RAT (Remote Access Trojan) type malware that we have baptized “Banker RTC Portal”.

Brazilian Trojan Guildma reaches Spain

David García
July 1, 2019
Mobile version
banking malware

In mid-May we detected a new Guildma campaign that affected banks in Spain, as well as different countries in Latin America and Portugal. Recently, we have continued to receive samples with small changes in the code.

Bankbot: Evolution to Date

David García
April 10, 2019
Mobile version
banking malware

Nowadays, more and more people use their mobile devices to carry out their everyday tasks, such as managing their bank accounts, which has resulted in an upward trend in the amount of malware detected for these types of platforms.

Cryptocurrency malware: an explosive mix!

David Morán
April 5, 2018
Mobile version
banking malware

Since cryptocurrencies came on the scene in late 2008 and early 2009, new malware has gradually emerged that does its utmost to steal users’ wallets and cryptocurrencies. This malware, just like all the others, has steadily evolved, implementing new methods for achieving its goals, as we explain below.

WebInject to mobile attack

David Morán
February 27, 2018
Mobile version
ATO, banking malware

On multiple occasions, through bugFraud, we have detected WebInject attacks that begin with a computer banking Trojan and which, on account of the protection methods offered by banking institutions, have had to adapt to attack the mobile device.