Names | CHAVECLOAK | |
Category | Malware | |
Type | Banking trojan, Reconnaissance, Backdoor, Info stealer, Credential stealer | |
Description | (Fortinet) FortiGuard Labs recently uncovered a threat actor employing a malicious PDF file to propagate the banking Trojan CHAVECLOAK. This intricate attack involves the PDF downloading a ZIP file and subsequently utilizing DLL side-loading techniques to execute the final malware. Notably, CHAVECLOAK is specifically designed to target users in Brazil, aiming to steal sensitive information linked to financial activities. | |
Information | <https://www.fortinet.com/blog/threat-research/banking-trojan-chavecloak-targets-brazil> |
Last change to this tool card: 07 March 2024
Download this tool card in JSON format
Previous: CHAIRSMACK
Next: ChChes
Changed | Name | Country | Observed | ||
Unknown groups | |||||
_[ Interesting malware not linked to an actor yet ]_ |
1 group listed (0 APT, 0 other, 1 unknown)
Digital Service Security Center Follow us on |
Report incidents |
|
+66 (0)2-123-1227 | ||
[email protected] |