Tag: south america

2 Attack Reports | 0 Vulnerabilities

Attack reports

Brazilian Caminho Loader Employs LSB Steganography and Fileless Execution to Deliver Multiple Malware Families Across South America, Africa, and Eastern Europe

A new malware loader called Caminho, originating from Brazil, has been identified using steganography to hide .NET payloads in image files hosted on legitimate platforms. Active since March 2025, the campaign has evolved significantly, delivering various malware types across South America, Africa, …
xworm
steganography
africa
brazil
remcos rat
fileless execution
eastern europe
katz stealer
south america
loader-as-a-service
2025-10-22
caminho loader
Published: October 22, 2025
Downloadable IOCs: 0

TAG-144's Persistent Grip on South American Organizations

Insikt Group has identified five distinct activity clusters linked to TAG-144 (Blind Eagle), targeting primarily Colombian government entities across local, municipal, and federal levels throughout 2024 and 2025. The clusters share similar tactics, techniques, and procedures (TTPs) such as using op…
xworm
asyncrat
njrat
dcrat
bitrat
quasarrat
remcos rat
blotchyquasar
limerat
2025-08-26
south america
tag-144
Published: August 26, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports