Malware
JanelaRAT
- First Reported
- Apr 13, 2026
- Latest Reported
- Apr 18, 2026
Reported Context (3)
- In Lateinamerika hat die Malware JanelaRAT ein Update erhalten: Sie kapert nun aktive Banking-Sessions und fängt mit betrügerischen Overlay-Bildern Passwörter und 2FA-Codes ab. Allein 2025 verzeichnete Kaspersky über Hsinchu Logistics outage disrupts operations amid suspected ransomware attack
- JanelaRAT, a modified BX RAT, is actively targeting banks and financial institutions in Latin America—particularly Brazil and Mexico—to steal financial and cryptocurrency data while monitoring user activity and Kaspersky Reports 14,739 JanelaRAT Attacks Recorded in Brazil in 2025
- JanelaRAT is a banking-focused remote access Trojan campaign active since mid-2023 that uses multi-stage phishing lures, evolving droppers (including MSI-based sideloading), and dynamic C2 infrastructure to target JanelaRAT Evolves Its Delivery Chain and Enables Live Banking-Session Hijacking
CVE (2)
Malware (2)
People (1)
Threat Actors (1)
MITRE ATT&CK (19)
Vendors (4)
Products (8)
Tools (3)
Industries (2)
Countries (4)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.