AI Tools Fuel Brazilian Phishing Scam While Efimer Trojan Steals Crypto from 5,000 Victims
What’s new: A new phishing campaign in Brazil is utilizing AI-powered website building tools to create replica sites mimicking government agencies. These sites trick users into making payments via the PIX payment system while collecting sensitive personal information. Additionally, a malspam campaign distributing the Efimer Trojan has been detected, targeting cryptocurrency users and affecting over 5,000 individuals.
Who’s affected
Victims of the phishing campaign include individuals in Brazil who are misled into providing personal information and making payments. The Efimer Trojan primarily impacts cryptocurrency users, with infections reported in Brazil and several other countries including India, Spain, and the U.K.
What to do
- Implement robust email filtering to reduce exposure to phishing attempts.
- Educate users on identifying phishing websites and suspicious emails.
- Encourage the use of two-factor authentication for cryptocurrency wallets.
- Regularly update and patch systems to protect against malware infections.