Grandoreiro goes north: From Brazil to Mexico with a new DLL sideloading campaign

Reported 19 Aug 2026 by otx · Severity: medium

Grandoreiro, a notorious banking trojan active since 2016 across Latin America, continues operations despite major law enforcement disruption in 2024. Recent campaigns leverage DLL sideloading techniques, abusing the legitimate Duplicate Files Finder application to execute malici