Grandoreiro Banking Trojan Resurfaces in Mexico with Enhanced Evasion Techniques

The Grandoreiro banking Trojan has resurfaced in a new campaign targeting Mexico following a law enforcement takedown. The malware has been updated with enhanced features designed to evade detection and complicate analysis. The campaign specifically focuses on financial institutions and users in Mexico, though no exact victim count or financial losses were disclosed. No specific CVE IDs, dates, or technical indicators (e.g., hashes, IPs) were mentioned in the report. The updated version of Grandoreiro employs obfuscation techniques to hinder reverse engineering and threat intelligence efforts.