Exposed Server Reveals AI-Assisted Phishing Toolkit Behind WebDAV Malware Campaign
A malware operator left its delivery server exposed, allowing Rapid7 to recover a full toolkit of 1,048 files including lure templates, filename-spoofing…
Tag: Mexico
.NET Infostealer Targeting Mexican Users
A .NET-based infostealer delivered via fake CURP lookup, hollowed into a signed Qihoo 360 process to steal cryptocurrency wallets, browser credentials, and…
SCMBANKER Malware Uses ClickFix Lures to Target Mexican Banking Users
A new banking fraud operation tracked as REF6045 by Elastic Security Labs is targeting customers of Mexican banks, fintech platforms, payment processors,…
REF6045: Banking Fraud Operation Targeting Mexican Financial Institutions
REF6045 is a threat actor cluster tracked by Elastic Security Labs that uses ClickFix lures to infect victims with the SCMBANKER malware.…