Breaking cybersecurity news, news analysis, commentary, and other content from around the world, with an initial focus on the Middle East & Africa, the Asia Pacific, Europe, and Latin America.

The banking Trojan, post-law enforcement takedown, is sprucing itself up with features that make detection and analysis harder.

August 20, 2026

The Grandoreiro banking Trojan continues to pose a significant threat to banking customers, primarily in Latin America, more than two years after law enforcement disrupted its operations.

The latest evidence is a new campaign using the 12-year-old payload that's targeting users in Mexico. The operators are using DLL sideloading and a legitimate file-management application to deliver the malware.