Tag: pix qr interception

1 Attack Reports | 0 Vulnerabilities

Attack reports

Inside Banana RAT: From Build Server to Banking Fraud

An MDR investigation successfully mapped the complete operational infrastructure of Banana RAT, a Brazilian banking trojan operated by threat cluster SHADOW-WATER-063. The investigation uncovered both server-side and client-side components, revealing a sophisticated FastAPI-based polymorphic payloa…
powershell
financial fraud
casbaneiro
grandoreiro
mekotio
guildma
2026-05-19
banana rat
brazilian banking trojan
chavecloak
fastapi
pix qr interception
polymorphic payload
tetrade
Published: May 19, 2026
Downloadable IOCs: 8
Click here to see more Attack Reports