{"id":5110,"date":"2024-04-16T20:26:26","date_gmt":"2024-04-17T02:26:26","guid":{"rendered":"https:\/\/priegobrito.mx\/?p=5110"},"modified":"2024-04-16T20:26:26","modified_gmt":"2024-04-17T02:26:26","slug":"grandoreiro-malware-alert-for-fraud-that-starts-with-an-email-interpol-already-investigating-it","status":"publish","type":"post","link":"https:\/\/priegobrito.mx\/en\/blog\/2024\/04\/alertan-por-malware-grandoreiro-el-fraude-que-comienza-con-un-correo-la-interpol-ya-lo-investiga\/","title":{"rendered":"Grandoreiro malware, the fraud that starts with an email, is being investigated by Interpol"},"content":{"rendered":"

Brazil, Mexico and Argentina are among the countries most affected by the Grandoreiro malware, a banking Trojan that aims to trick people into stealing their money and does so via email, reported cybersecurity firm Kaspersky.<\/p>\n

Grandoreiro is a banking Trojan of Brazilian origin that, according to Kaspersky data, has been active since at least 2016. According to estimates, cybercriminals are believed to have stolen more than \u20ac3.5 million from their victims.<\/p>\n

How does Grandoreiro malware operate?<\/h2>\n

Attacks carried out through this malware usually start with a spear-phishing email written in Spanish, Portuguese or English.<\/p>\n

Spear-phishing attacks are personalized and targeted at specific individuals or companies. They are usually carried out via emails that appear legitimate to the recipient and motivate them to share sensitive data such as login credentials or financial information, according to Kaspersky.<\/p>\n

Once installed on the victim's device, the Trojan can perform the following actions:<\/p>\n