Coyote Trojan: The New Trickster Exploiting Microsoft’s Accessibility for Banking Havoc
Akamai’s analysis reveals that the Coyote banking trojan is the first malware to exploit Microsoft’s UI Automation framework. It’s been targeting Windows users in Latin America since at least February 2024, using keylogging and phishing to steal banking and crypto credentials. So, if your bank account starts howling, it might be time to check for Coyote!
Hot Take:
Who knew that the Coyote would be more than just a pesky cartoon character? This time, it’s gone digital, and it’s not chasing roadrunners but your bank account! Akamai’s new findings show the Coyote trojan is not just a one-trick pony; it’s a master of disguise, using Microsoft’s UI Automation to sneak into your system like a ninja in the night. Looks like the only thing getting ‘Acme-d’ here is your cybersecurity!
Key Points:
- Akamai discovered the Coyote banking trojan is the first malware to abuse Microsoft’s UI Automation framework.
- Coyote targets Windows devices in Latin America, aiming to steal banking and cryptocurrency credentials.
- The malware uses keylogging and phishing overlays to collect data from victims.
- UIA abuse allows Coyote to stealthily execute commands and redirect browsers, bypassing detection systems.
- Coyote’s cunning use of UIA enables it to identify financial services used by victims, even offline.