A new and fearsome one Banking trojannamed Coyotewas identified and analyzed by Kaspersky.
Cyber security researchers have spotted this malware in well 61 appthrough which the malicious agent steals credentials to the unsuspecting victims.
The aforementioned analysis highlighted how the Trojan seems, at the moment, to be active mostly in Brazil, although its expansion into other geographical areas is also likely. The same is implemented in a programming language Nim and with a different structure than many other “colleagues”, making use of at least a dozen harmful features.
Second Fabio Assolinihead of Latin American Global Research and Analysis Team (GReAT) by Kaspersky, Coyote is a trojan that must be monitored carefully, even if it affects a specific region, in fact, according to the expert it could follow the example of other malware families. In fact, these were initially active in South America and then quickly spread to other continents.
Coyote, the danger of future mutations and the use of Squirrel
Not only that: for Assolini, Coyote could follow the example of other malware, evolving into much more dangerous forms. The same expert mentioned The emotion e Trickbotnotorious malicious agents have changed their nature with the passage of time.
The trojan in question can execute several commands, get screenshot of affected devices, record typed passwords, kill active processes e turn off the device infected.
As reported by Kaspersky on its blog, most banking trojans use Windows Installer (MSI) which makes them easy to spot. In this sense, however, Coyote uses Squirrela tool open source legitimate for installing and updating Windows desktop apps. Which makes its detection much more difficult.
As with any other type of malware, specialists recommend maximum Attention e caution online. A careful attitude, combined with a antivirus high-level, it can be a great way to avoid unpleasant encounters with malware and the like.