Mexican financial institutions are being targeted by an unknown Latin American threat actor using a spear-phishing campaign that delivers a modified version of the open-source AllaKore remote access trojan (RAT). The phishing campaign, which has been in operation since 2021, focuses mainly on large companies with gross revenues exceeding $100 million. The modified AllaKore RAT is designed to steal banking credentials and other authentication data for financial fraud purposes.

Booking.com breach gives scammers what they need to target guests – Malwarebytes
Booking.com breach gives scammers what they need to target guests Malwarebytes


