TGViewer
CTT Report Hub CTT Report Hub @aptreports · 3.51K subscribers
Post #32355 44
#ParsedReport #CompletenessMedium
10-09-2026

Casbaneiro: A Banking Trojan with Distributed Data-Receiving Servers

https://www.fortinet.com/blog/threat-research/casbaneiro-a-banking-trojan-with-distributed-data-receiving-servers

Report completeness: Medium

Threats:
Metamorfo
Clipboard_injection_technique
Ousaban

Victims:
Financial institutions, Bank users

Industry:
Financial

Geo:
Peru, Mexico, Argentina, Latin america, Colombia

TTPs:
Tactics: 1
Technics: 0

ChatGPT TTPs:
do not use without manual check
T1027, T1027.009, T1027.013, T1033, T1036, T1047, T1055, T1059.007, T1071.001, T1082, have more...

IOCs:
File: 2
Hash: 44
Domain: 13
IP: 2
Coin: 2

Soft:
Windows service, Outlook, Microsoft Outlook

Algorithms:
base64, zip, md5, exhibit

Languages:
javascript, autoit, jscript
Fortinet Blog Casbaneiro: A Banking Trojan with Distributed Data-Receiving Servers FortiGuard Labs examines how a new Casbaneiro campaign targeting Latin America uses geofencing and distributed servers to evade analysis and detection…
More from @aptreports
  1. Oct 7, 2026#ParsedReport #ChatGPT #Translated Autotext: (TI Report Analyser + ChatGPT + Auto Translat…
  2. Oct 7, 2026#ParsedReport #GeneratedSchema Generated with GPT-4
  3. Oct 7, 2026#ParsedReport #CompletenessLow 07-10-2026 PhantomSub: Malicious npm Campaign Secretly Adds…
  4. Oct 7, 2026#ParsedReport #ChatGPT #Translated Autotext: (TI Report Analyser + ChatGPT + Auto Translat…
  5. Oct 7, 2026#ParsedReport #GeneratedSchema Generated with GPT-4
  6. Oct 7, 2026#ParsedReport #CompletenessUnknown 06-10-2026 CITRIX 0-DAY EXPLOITS: CVE-2026–88771 & CVE-…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →