New TOITOIN Banking Trojan Targeting Latin American Businesses

[silversurfer]

Content source

https://thehackernews.com/2023/07/new-toitoin-banking-trojan-targeting.html

Businesses operating in the Latin American (LATAM) region are the target of a new Windows-based banking trojan called TOITOIN since May 2023.

"This sophisticated campaign employs a trojan that follows a multi-staged infection chain, utilizing specially crafted modules throughout each stage," Zscaler researchers Niraj Shivtarkar and Preet Kamal said in a report published last week.

"These modules are custom designed to carry out malicious activities, such as injecting harmful code into remote processes, circumventing User Account Control via COM Elevation Moniker, and evading detection by Sandboxes through clever techniques like system reboots and parent process checks."

The six-stage endeavor has all the hallmarks of a well-crafted attack sequence, beginning with a phishing email containing an embedded link that points to a ZIP archive hosted on an Amazon EC2 instance to evade domain-based detections. [...]

 

[HarborFront]

Already detected at VirusTotal

VirusTotal

VirusTotal

www.virustotal.com

 

[upnorth]

Already detected at VirusTotal

If one check in the " Details tab. The first submission shows on this specific sample that it's pretty old by now.