Coyote Malware Unleashes UI Automation Mayhem: Brazilian Banks in the Crosshairs!
Coyote malware is the first to exploit Windows UI Automation, targeting Brazilian users’ bank credentials like it’s a high-stakes scavenger hunt. With a knack for keylogging, phishing, and snooping through browser tabs, this malware is the digital equivalent of borrowing your wallet and never giving it back.
Hot Take:
Looks like the Coyote has finally caught the Road Runner, and this time it’s banking on Windows UI Automation to fund its nefarious activities. Who knew accessibility tools could be so accommodating to hackers! Move over, Acme Corporation, this Coyote’s weapon of choice is UIA!
Key Points:
- Coyote malware is the first to exploit Microsoft’s UI Automation framework.
- Targets Brazilian users across 75 banks and crypto platforms.
- Employs LNK files with PowerShell commands to deploy the trojan.
- UI Automation framework allows extraction of hidden web addresses.
- Admins advised to monitor UIAutomationCore.dll and UIA_PIPE_*.
Already a member? Log in here