Mekotio Trojan Targets Americans: Financial Data at Risk

Mekotio is a banking trojan active since 2015 that targets users in Brazil, Chile, Mexico, Spain, and Peru through phishing emails masquerading as tax agency communications; it is delivered via ZIP or PDF attachments or malicious links, establishes persistence, harvests banking credentials and other sensitive data (screenshots, keystrokes, clipboard), and communicates with command-and-control servers to facilitate financial fraud. Mitigations recommended include vigilant email practices, up-to-date email filters/anti-spam, and regular employee security awareness training.