Grandoreiro Malware and BTMOB RAT Campaigns Target Windows and Android Users

Latin America and Europe become the target of two banking trojan campaigns that are designed to infect Windows and Android devices with Grandoreiro and BTMOB malware, respectively. That's according to new findings from WatchGuard and ESET, which have observed the two malware families being used to single out companies in Spain, Portugal, and Mexico, as well as mobile users in Brazil. The

The article reports on two non-AI malware campaigns: Grandoreiro targeting Windows users and BTMOB targeting Android users, with phishing, DLL side-loading, and mobile device takeover capabilities described by WatchGuard and ESET. CyberSE.AI analysis: this is only indirectly relevant to AI security because the write-up includes a no-code malware builder and region-specific lure generation, but it does not indicate AI systems, model abuse, or prompt-injection activity. The practical security implication is to treat this as a broader malware and social-engineering threat that could intersect with AI-assisted phishing workflows, especially for security governance and red-teaming readiness.