Tag: mexico

2 Attack Reports | 0 Vulnerabilities

Attack reports

How to uncover a Horabot campaign and detect this malware

This report details the discovery and analysis of a Horabot malware campaign targeting primarily Mexican users. The attack chain begins with a fake CAPTCHA page leading to multiple stages of obfuscated scripts, ultimately delivering an AutoIT loader and a Delphi-based banking Trojan. The malware em…
powershell
casbaneiro
metamorfo
autoit
banking trojan
brazil
multi-stage attack
delphi
mexico
2026-03-18
email spreader
horabot
ponteiro
zusy
Published: March 18, 2026
Downloadable IOCs: 22

Greedy Sponge Targets Mexico with AllaKore RAT and SystemBC

A financially motivated threat group dubbed Greedy Sponge has been targeting Mexican organizations since 2021 with a modified version of AllaKore RAT and SystemBC malware. The group uses spear-phishing and drive-by downloads to deliver custom packaged installers containing the RAT. Recent updates i…
allakore rat
financial fraud
credential theft
drive-by download
systembc
spear-phishing
geofencing
2025-08-21
mexico
Published: August 21, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports