New Horabot campaign targets the Americas

• Cisco Talos has observed a threat actor deploying a previously unidentified botnet program Talos is calling “Horabot,” which delivers a known banking trojan and spam tool onto victim machines in a campaign that has been ongoing since at least November 2020.


• The threat actor appears to be targeting Spanish-speaking users in the Americas and, based on our analysis, may be located in Brazil.


• Horabot enables the threat actor to control the victim’s Outlook mailbox, exfiltrate contacts’ email addresses, and send …

actor americas banking banking trojan botnet campaign cisco cisco talos machines november program spam spanish speaking talos targeting threat threat actor tool trojan victim