
Casbaneiro Malware Hides C2 Activity Until Victims Visit Banking Websites
Casbaneiro hides its main command channel until Latin American victims open targeted banking sites.
4 stories, newest first · one card per story

Casbaneiro hides its main command channel until Latin American victims open targeted banking sites.

Casbaneiro banking trojan phishes Latin American users and starts banking C2 only after victims open targeted bank sites.

Fortinet details Casbaneiro banking Trojan campaign hitting Latin American bank customers via invoice-themed PDF phishing, with AutoIt loading, RegSvcs.exe injection, and bank-site-triggered activation.

Casbaneiro banking Trojan targets Latin American bank users via phishing PDFs, geofencing, AutoIt staging, and distributed C2 servers to evade detection.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views