Mexican financial institutions are being targeted by an unknown Latin American threat actor using a spear-phishing campaign that delivers a modified version of the open-source AllaKore remote access trojan (RAT). The phishing campaign, which has been in operation since 2021, focuses mainly on large companies with gross revenues exceeding $100 million. The modified AllaKore RAT is designed to steal banking credentials and other authentication data for financial fraud purposes.

Hackers Exploiting Three-Year-Old FortiGate Vulnerability to Bypass 2FA on Firewalls
Cybercriminals are actively abusing a long-patched Fortinet FortiGate flaw from July 2020, slipping past two-factor authentication (2FA) on firewalls and potentially granting unauthorized access to


