Brazilian Banking Trojan Actively Spreading in Portugal
2026-07-23T08:51:40Z•72db845ce997f25556c26380517ae54e0bf4785926d3220d70ee73f0ce2504c4
AI attacksAndroid spywareBEC/phishingCVE-2026-60137CVE-2026-63030GigaWiperLLM jailbreaksMFA bypassSonicWall SMAUEFI/secure-bootWP2ShellWi‑Fi 6GHzWordPressbanking trojancookie trackersdata leakageidentity attacksransomwaresupply-chain compromisezero-day
What happened
A cluster of active, high-impact threats and systemic risks: widespread exploitation of the newly disclosed "WP2Shell" WordPress flaws (CVE-2026-60137, CVE-2026-63030) is enabling remote takeovers at internet scale; SonicWall SMA zero-days are being chained to achieve root on appliances; modular destructive malware (GigaWiper) and ransomware are disrupting supply chains and service providers; a Brazilian banking Trojan is actively targeting Portuguese businesses; an Android surveillance app is being distributed via fake Play sites; and attackers are increasingly abusing AI toolchains, LLM jail
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- darkreading
- Record identifier
- 72db845ce997f25556c26380517ae54e0bf4785926d3220d70ee73f0ce2504c4
- Enrichment time
- 2026-07-23T08:51:40Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.