Grandoreiro is a Brazilian banking trojan and part of the Tetrade group. It has been active against Iberian targets, surviving an Interpol-coordinated takedown in January 2024. It uses PDF lures and country checks, and continues to target Portuguese banks.