Scam papers served.
ID: 3eec130a-b881-5ed5-9a97-331dbfcde23e
STIX ID: report--3eec130a-b881-5ed5-9a97-331dbfcde23e
Feed Name: The CyberWire
BlueVoyant researchers uncovered a large-scale campaign by the Brazil-linked Augmented Marauder (aka Water Saci) targeting Spanish-speaking users across Latin America and Europe that uses fake judicial summons, WhatsApp automation, ClickFix tactics, and email phishing to deliver the Casbaneiro banking trojan via the Horabot framework; the operation employs password‑protected PDFs, dynamic ZIP filenames, anti-sandbox checks, fileless execution, and customized lures to evade detection and converts infected hosts into self‑propagating botnets that hijack Outlook and webmail accounts.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
