Garanti BBVA

The email changes the text and the compressed attachment. Inside, however, there is an exe with the same malware and the stolen data is exfiltrated via Telegram Api to the same C2.

Cybercrime, Snakekeylogger hides in a SWIFT transfer

The tar attachment of a fake email from Garanti BBVA contains an exe: the malware.…

Cybercrime, Snakekeylogger hides in a SWIFT transfer

The tar attachment of a fake email from Garanti BBVA contains an exe: the malware. Stolen data is exfiltrated via Telegram API.

Cybercrime, fake account statement of Garanti BBVA carries SnakeKeylogger

The email 7z attachment contains an exe file – the malware. The stolen data is…

Cybercrime, fake account statement of Garanti BBVA carries SnakeKeylogger

The email 7z attachment contains an exe file – the malware. The stolen data is then exfiltrated via Telegram API.