Snakekeylogger hides in a SWIFT transfer. The tar attachment of a fake email from Garanti BBVA contains an exe: the malware. Stolen data is exfiltrated via Telegram API

Snakekeylogger hides inside an email about a false SWIFT transfer, coming from Garanti BBVA.

The tar attachment contains an exe file: the malware. The stolen data is then exfiltrated via Telegram API.

Indeed, SnakeKeylogger is an info stealer capable of acquiring information through various methods.