Skip to main content
CPEBuddy
Reverse Engineering an Itaú Banking Phishing Malware | Inside a .NET Credential Stealer

Reverse Engineering an Itaú Banking Phishing Malware | Inside a .NET Credential Stealer

Source: YouTube · Malware Research Diary · published Jun 2, 2026 · 27:27

Malware Analysis
No ratings yet Log in to rate
Transcript Available
Description

BLUF: The video introduces a rare analysis of South American banking malware, highlighting its unique operational focus and distinct techniques compared to malware from other regions 0:17.

Key Takeaways:
• The presenter notes it has been approximately ten years since they last analyzed banking malware, making this analysis particularly notable 0:34.
• South American banking malware is characterized by a heavy emphasis on financial theft, targeting specific regional banks like BB.com and Itaú 0:23.
• There is a distinct stylistic and technical divergence between South American malware and variants from Southeast Asia or Russia, particularly in login handling and logging mechanisms 0:44.

This analysis provides valuable insight into the specialized ecosystem of Latin American cyber threats.

Sources:

  • 0:17 Introduction to the specific banking malware sample
  • 0:23 Discussion of the malware's regional targeting
  • 0:34 Context on the rarity of such analyses
  • 0:44 Comparison of malware techniques across different global regions

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 0.5 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Malware Analysis. Commonly maps to: Security Operations, Security Architecture and Engineering. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

Hello everyone, welcome back. Um, today we're going to take a look at um interesting malware. Um, I uh mware haven't analyzed for a very long time. So um the malware today is um contain this hands right here is a um banking I believe is a banking malware um targeting it of South America banking South South America um malware is really interesting um I I haven't analyzed um any for the last like 10 years so but um for my experience they always use a various different techniques um really advanced or very different from you know the the Chinese um Southeast Asia type of malware versus the the Russian um type of malware. So um they are more heavily focused in banking. So you know the um bb.com B um itu um they have a different type of use case in logging in. So in the past this type of malwar…