Casbaneiro: A Banking Trojan with Distributed Data-Receiving Servers

Reported 10 Sep 2026 by otx · Severity: medium

In August 2026, a Casbaneiro campaign targeted Latin American users through phishing emails and PDFs themed as fake invoices and legal notices. The multi-stage infection chain includes HTA downloaders and AutoIt loaders, employing geofencing to filter victims by IP address locati