SecurityThe Hacker Newsabout 3 hours ago
SCMBANKER Malware Targets Mexican Banking Users
1 min read
Elastic Security Labs tracks REF6045, a campaign using fake CAPTCHA pages to install SCMBANKER malware on Mexican banking users. The PowerShell toolkit monitors banking sessions, locks screens, redirects browsers, and swaps clipboard data. Evidence shows a large language model helped develop the tooling. An open directory leak exposed the operation's infrastructure.
Level
Hype check
Tap to vote and see what everyone thinks.
