Netskope Threat Labs

Banbra

ATP Sandbox Adv. HeuristicsAV

Banbra is a long lived Brazilian banking trojan family that steals credentials and payment information from customers of financial institutions. It has circulated since the early 2000s through spam, malicious attachments, and fake invoices, and researchers have documented it installing keyloggers and abusing legitimate remote administration tools to control victims.

First seen
April 2022
Last seen
October 2026
Alert Name
Android.Infostealer.Banbra
Android.Trojan.Banbra
ByteCode-MSIL.Infostealer.Banbra
Script-JS.Infostealer.Banbra
Script-WScript.Infostealer.Banbra
Trojan.Spy.Banbra.EQ
Win32.Infostealer.Banbra
Win32.Trojan.Banbra
Win64.Trojan.Banbra