Inside Banana RAT: From Build Server to Banking Fraud

Reported 19 May 2026 by otx · Severity: medium

An MDR investigation successfully mapped the complete operational infrastructure of Banana RAT, a Brazilian banking trojan operated by threat cluster SHADOW-WATER-063. The investigation uncovered both server-side and client-side components, revealing a sophisticated FastAPI-based