Threat Intelligence Report

TCLBANKER: Brazilian Banking Trojan Spreading via WhatsApp and Outlook

📅 May 6, 2026 📰 www.elastic.co 🔍 0 CVE(s) referenced

TCLBANKER is a highly evasive Brazilian banking trojan that leverages a trojanized installer, advanced social engineering overlays, and self-propagating WhatsApp and Outlook worm modules to steal credentials and spread rapidly, signaling a new level of sophistication and scale in Latin American financial malware campaigns.

vendor

🔐 Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

📊 Visual Mindmap

🎯 IOC Extraction

⚔️ MITRE ATT&CK TTPs

📦 STIX 2.1 Bundle