Description
Mekotio is a banking trojan whose campaigns target bank customers in South America and Europe. It reached victims through fake security update lures and HTML smuggling techniques, and its operators renewed the family's stealth and encryption across multiple waves of activity. Spanish authorities arrested 16 people in 2021 for distributing the Mekotio and Grandoreiro banking trojans.
Stats
- First seen
- April 2022
- Last seen
- October 2026
Alert name variants
| Alert Name |
|---|
| AIT:Trojan.Mekotio.2 |
| Document-PDF.Trojan.Mekotio |
| Gen:Variant.Mekotio.1 |
| Script-AutoIt.Spyware.Mekotio |
| Script-BAT.Trojan.Mekotio |
| Script-JS.Trojan.Mekotio |
| Win32.Infostealer.Mekotio |
| Win32.Spyware.Mekotio |
| Win32.Trojan.Mekotio |
| Win64.Spyware.Mekotio |