Breaking cybersecurity news, news analysis, commentary, and other content from around the world, with an initial focus on the Middle East & Africa, the Asia Pacific, Europe, and Latin America.
Portuguese businesses operate in the same native language as Brazilian hackers, making those businesses easy targets.
July 23, 2026
An old Brazilian banking malware is still making rounds today, in ongoing attacks against Portuguese organizations.
"Lampion" — named after Japanese-style paper lamps — is a banking Trojan believed to have originated in Brazil, where banking Trojans are as culturally native as samba music. It was first discovered around the 2019 holiday season, and Portuguese organizations haven't given hackers all that much reason to modify it. Researchers at Acronis found that it's still being used in attacks today, largely in the same form it came in years ago.
