Blind Eagle phishing uses fake court notices to deliver a RAT
Zenox reports no confirmed successful infections; the in-memory payload is an AsyncRAT fork with DCRat lineage.
Stories per day · 30 days
2 RSS
Relatedphishing2russia2africa1ai-agents1ai-disinfo1ai-in-attacks1ai-misuse1amatera1apt-c-361arrests1asyncrat1blind-eagle1claude1clickfix1csam1cybercartel1cyberstrikeai1dark-clark1
26 stories, newest first · one card per story
Stories tagged #latin-america
Russian influence operation targets Latin America
AI-assisted disinformation campaign used fake emails and local organization to target schools in Peru and Ecuador.
1
CyberStrikeAI used in real attacks on African and Latin American education organizations
Kaspersky reports a campaign deploying open-source CyberStrikeAI framework with LLM orchestrator targeting education organizations in Africa and Latin America.
5
ESET details Amatera infostealer spread, capabilities, and MaaS model
Sold from $199 a month, it led ESET’s Latin America infostealer detections in the first half of 2026.
1
CyberCartel used Claude and Grok against 400-plus financial firms
Straiker reviewed the group’s CARLIY0S system and a snapshot of 4,493 records, without confirming every target was breached.
2
Police arrests 95 suspects in international CSAM crackdown action
Police in 17 countries arrested 95 suspects in an INTERPOL crackdown on online CSAM distribution.
2
Russian Influence Operation Widely Targeting Latin America
OpenAI says Russian operation Dark Clark used spoofed emails and AI to target schools in Peru and Ecuador.
1
Casbaneiro Malware Hides C2 Activity Until Victims Visit Banking Websites
Casbaneiro hides its main command channel until Latin American victims open targeted banking sites.
2
Casbaneiro Banking Trojan Activates Only When Victims Visit Targeted Bank Websites
Casbaneiro banking trojan phishes Latin American users and starts banking C2 only after victims open targeted bank sites.
2
.jpg%3Fwidth%3D720%26quality%3D80%26disable%3Dupscale&w=828&q=75)
China's FamousSparrow APT Spies on US Politics in Latin America
China-linked APT FamousSparrow is running a stealthy backdoor espionage campaign targeting US political interests in Latin America.
China’s FamousSparrow hackers target Latin America with new backdoor
ESET links a new SparroWocky backdoor campaign against Latin American government agencies to Chinese espionage group FamousSparrow.
FamousSparrow Swaps SparrowDoor For New SparroWocky Backdoor
China-aligned FamousSparrow deployed its new SparroWocky backdoor against Latin American governments since August 2025, initially accessing networks via exploited Exchange servers.
FamousSparrow Exploits Public-Facing Exchange Servers to Deploy SparroWocky Backdoor
ESET attributes a new SparroWocky backdoor to espionage group FamousSparrow, deployed via exploited internet-facing Exchange servers across Latin American governments.
3
FamousSparrow Deploys New SparroWocky Backdoor Against Latin American Governments
China-aligned APT FamousSparrow deployed a new modular backdoor, SparroWocky, against government entities across eight Latin American countries since August 2025, ESET reports.
China-Aligned FamousSparrow Deploys SparroWocky Backdoor Across Latin America
China-aligned espionage group FamousSparrow replaced SparrowDoor with a new modular backdoor, SparroWocky, targeting government entities across eight Latin American countries since August 2025.
Chinese hackers use SparroWocky malware in govt espionage attacks
ESET reports China-linked FamousSparrow deployed a new modular backdoor, SparroWocky, in year-long espionage attacks on Latin American government organizations.
2
Beware the SparroWock: The backdoor that bites, the commands that catch
ESET attributes a new modular C++ backdoor, SparroWocky, to China-aligned group FamousSparrow, deployed against government entities across Latin America since August 2025.
Hackers Deploy Casbaneiro Banking Trojan That Activates When Victims Open Bank Websites
Fortinet details Casbaneiro banking Trojan campaign hitting Latin American bank customers via invoice-themed PDF phishing, with AutoIt loading, RegSvcs.exe injection, and bank-site-triggered activation.
4
Casbaneiro Banking Trojan Uses Distributed C2 Servers to Evade Detection and Target Bank Users
Casbaneiro banking Trojan targets Latin American bank users via phishing PDFs, geofencing, AutoIt staging, and distributed C2 servers to evade detection.
3
Hackers Use Claude and GPT-Powered Tools to Help Breach Government and Financial Networks
Unit 42 links two Latin America campaigns where operators used Claude and GPT-4.1 during intrusions against government and financial targets.
4
Hackers Use LLMs to Generate Exploit Scripts and Automate Post-Exploitation Across Latin America
Unit 42 says Latin American attackers used LLMs to automate post-exploitation in campaigns hitting Mexican government, water utilities, and Brazilian financial firms.
3
BraZetsu Malware Turns Compromised Windows Hosts Into Criminal Marketplace Inventory
Group-IB details BraZetsu, a modular Python Windows malware that monetizes compromised-host access through the Infected Marketplace for initial access brokers.
Financially Motivated Threat Actor BREEZE COMET Targets Brazil
Google Threat Intelligence details BREEZE COMET, a financially motivated group manipulating Brazilian payment systems and banking software to conduct fraudulent transfers since 2024.
1
Grandoreiro Resurfaces in Mexico With New DLL Sideloading Campaign
Banking trojan Grandoreiro resurfaces in Mexico using DLL sideloading, now accounting for 40% of detections after its 2024 disruption.