AllaKore RAT’s Grip Tightens on Mexican Financial Institutions

Threat Level – Amber | Vulnerability Report
Download PDF

A threat actor has been targeting Mexican banks and cryptocurrency trading since at least 2021. Using custom installers, the actor distributes a modified version of the AllaKore RAT, an open-source remote access tool. The campaign cleverly mimics the Mexican Social Security Institute (IMSS) in its lures, embedding links in seemingly legitimate documents during the initial stage.

What’s new on HivePro

Get through updates and upcoming events, and more directly in your inbox