Malware
Rocinante
- First Reported
- Aug 28, 2024
- Latest Reported
- Aug 14, 2025
Reported Context (2)
- The name "PegasusSpy" already popped up in our research of Rocinante - another Trojan targeting users from Brazil (and not to be confused with Pegasus spyware). PhantomCard Android Trojan Relays Brazilian Users’ Bank Card Data Over NFC
- Recently, we were able to identify a new strain of malware, originating from Brazil, which embodies this new wave of bankers, which we called Rocinante. Rocinante Android Banker Malware Targets Brazilian Banks with Keylogging and Remote Control
Malware (11)
Threat Actors (1)
MITRE ATT&CK (7)
Products (2)
Tools (3)
Industries (1)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.