JanelaRAT: a financial threat targeting users in Latin America JanelaRAT is a banking-focused remote access Trojan campaign active since mid-2023 that uses multi-stage phishing lures, evolving droppers (including MSI-based sideloading), and dynamic C2 infrastructure to target banking users in Latin America. The malware performs real-time session hijacking with overlays, input injection, and extensive monitoring while using obfuscation and anti-analysis techniques to evade detection. #JanelaRAT #Brazil

JanelaRAT is a LATAM banking Trojan using multi-stage phishing, MSI sideloading, and dynamic C2 to hijack sessions with overlays and input injection. It employs obfuscation and anti-analysis tactics. #JanelaRAT #Brazil #BankingThreat