
| Names | Janeleiro | |
| Category | Malware | |
| Type | Banking trojan, Backdoor, Keylogger, Info stealer, Credential stealer | |
| Description | (ESET) This new threat, which we’ve named Janeleiro, attempts to deceive its victims with pop-up windows designed to look like the websites of some of the biggest banks in Brazil. These pop-ups contain fake forms, aiming to trick the malware’s victims into entering their banking credentials and personal information that the malware captures and exfiltrates to its C&C servers. Janeleiro follows exactly the same blueprint for the core implementation of this technique as some of the most prominent malware families targeting the region: Mekotio, Grandoreiro, Mekotio, Amavaldo, and Vadokrist, among others. | |
| Information | <https://www.welivesecurity.com/2021/04/06/janeleiro-time-traveler-new-old-banking-trojan-brazil/> | |
| Malpedia | <https://malpedia.caad.fkie.fraunhofer.de/details/win.janeleiro> | |
Last change to this tool card: 28 December 2021
Download this tool card in JSON format
| Changed | Name | Country | Observed | ||
Unknown groups | |||||
| _[ Interesting malware not linked to an actor yet ]_ | |||||
1 group listed (0 APT, 0 other, 1 unknown)
|
Digital Service Security Center Follow us on |
Report incidents |
|
| +66 (0)2-123-1227 | ||
| [email protected] | ||