"Brazilian Banks Targeted by New AllaKore RAT Variant Called AllaSenha"

A new campaign targets Brazilian banks with "AllaSenha," a custom variant of the Windows-based "AllaKore" Remote Access Trojan (RAT). The malware uses Azure cloud as Command-and-Control (C2) infrastructure, according to the cybersecurity company HarfangLab. The attack begins with a malicious Windows shortcut (LNK) file posing as a PDF document hosted on a WebDAV server. This article continues to discuss findings regarding the new AllaKore RAT variant.

THN reports "Brazilian Banks Targeted by New AllaKore RAT Variant Called AllaSenha"

Submitted by grigby1