
A new hacking campaign has been identified by cybersecurity researchers from Cisco Talos. The campaign, known as Horabot, has been active for over two years and is primarily targeting Spanish-speaking users in Mexico, Uruguay, Venezuela, Brazil, Panama, Argentina, and Guatemala. The botnet is said to be operated by individuals based in Brazil and is capable of stealing login credentials, logging keystrokes, and grabbing system information. It can also take over email accounts and send spam messages to all contacts saved in the inbox. The malware is distributed through a malicious HTML attachment in an email message and ultimately leads to the download of a banking trojan. The trojan also has several obfuscation features that make it difficult to detect and analyze.