Search: “Mispadu”

15 stories

Unit 42 found a new Mispadu infostealer variant targeting Mexican users via malicious .url files exploiting the SmartScreen CVE-2023-36025 bypass.

Unit 42 discovered a new variant of Mispadu Stealer, a Delphi-based banking trojan first reported in 2019, found while hunting for the Windows SmartScreen bypass CVE-2023-36025. The campaign uses crafted .url files referencing UNC network-share paths with an HTTP port (@80) that forces payload retrieval over WebDAV via rundll32.exe, avoiding SmartScreen warnings. Analyzed samples (~4 KB, compiled 2023-11-12) predate the CVE publication, and ZIP payloads were likely distributed as email attachments, primarily targeting users in Mexico.

Palo Alto Unit 42Aug 17, 11:46 UTC · 29d agoMalware in the wildCVE-2023-360251

Search: “Mispadu”

Exploring the Latest Mispadu Stealer Variant

Mispadu Banking Trojan Targets Latin America: 90,000+ Credentials Stolen

Mispadu Trojan Steals 90,000+ Banking Credentials From Latin American Victims

Mispadu Trojan Targets Europe, Thousands of Credentials Compromised

New Mispadu Banking Trojan Exploiting Windows SmartScreen Flaw

TimbreStealer campaign targets Mexican users with financial lures

TimbreStealer Malware Targets Mexican Victims with Tax

ThreatsDay Bulletin: AI Prompt RCE, Claude 0-Click, RenEngine Loader, Auto 0

TimbreStealer Malware Spreading via Tax

New Grandoreiro Banking Malware Variants Emerge with Advanced Tactics to Evade Detection

DarkGate Malware Exploited Recently Patched Microsoft Flaw in Zero

Microsoft Rolls Out Patches for 73 Flaws, Including 2 Windows Zero

Alert: Brazilian Hackers Targeting Users of Over 30 Portuguese Banks

Latin American Javali trojan weaponizing Avira antivirus legitimate injector to implant malware

Grandoreiro campaign impersonates Spanish Agencia Tributaria