MEDIUMMalware
Global

JanelaRAT Malware Targets Latin American Banks with 14,739 Attacks in Brazil in 2025

·Source: The Hacker News

Updated:

Executive Summary

Banks and financial institutions in Latin American countries like Brazil and Mexico have continued to be the target of a malware family called JanelaRAT. A modified version of BX RAT, JanelaRAT is known to steal financial and cryptocurrency data associated with specific financial entities, as well as track mouse inputs, log keystrokes, take screenshots, and collect system metadata. "One of the

Analysis

Banks and financial institutions in Latin American countries like Brazil and Mexico have continued to be the target of a malware family called JanelaRAT. A modified version of BX RAT, JanelaRAT is known to steal financial and cryptocurrency data associated with specific financial entities, as well as track mouse inputs, log keystrokes, take screenshots, and collect system metadata. "One of the
Source Attribution

Originally published by The Hacker News on Apr 13, 2026.

Related Threats

CRITICALZero DayNEW

How AI is Rewriting the Zero-Day Playbook for Preemptive Security

The scenario is all too familiar for any cybersecurity professional: It’s late in the day, and a critical zero-day vulnerability is disclosed. When this happens, CISOs from every industry immediately turn to their Security Operations Centers (SOC) with the single most important, and often most difficult, question: "Are we exposed?” Answering questions like these when zero-days drop tends to trigge

Rapid7
HIGHVulnerabilityNEW

Rapid7 Cyber GRC is now available: Turn security action into compliance proof

Compliance has become one of the biggest operational drains on modern security teams. CISOs are being asked to manage a growing sprawl of frameworks, prove control effectiveness more often, respond to more customer assurance requests, track risk across a growing web of third parties, and give executives and the board a clearer answer on whether cyber risk is actually going down. Most of that press

Rapid7
CRITICALData BreachNEW

The Next Evolution of MDR: Preemptive Defense and Agentic Investigation

For years, security operations followed a familiar sequence: detect suspicious activity, investigate what happened, and respond before it caused significant harm. That model developed in a threat landscape where defenders had considerably more time to establish the facts and decide what to do next. In 2019, the average data breach took 206 days to identify and another 73 days to contain, creating

Rapid7