Signal

New Rust-based banking malware Venon targets Brazilian users in real-time Trojan campaign

Evidence first: scan the strongest sources, then decide whether to go deeper.

Published 2026-03-13 13:00 UTCUpdated 2026-03-13 21:08 UTC
rss
malwarebankingbrazilthreat_actor
Source links open
Source links and full evidence are open here. Archive history, compare-over-time, alerts, exports, API, integrations, and workflow are paid.
No card needed for the free brief.
Evidence trail (top sources)
top sources (2 domains)domains are deduped. counts indicate coverage, not truth.
2 top sources shown
Real-Time Banking Trojan Strikes Brazil's Pix Users
Dark Reading · News · darkreading.com · 2026-03-13 13:00 UTC
limited source diversity in top sources
Overview

Brazilian users face a new banking malware threat as Venon, a Rust-based Trojan identified by ZenoX, infects Windows systems using DLL side-loading. This campaign combines sophisticated malware techniques with real-time human operators to exploit Brazil's Pix payment system, increasing the risk of financial theft.

Entities
ZenoXVenonAlexander Culafi
Score total
0.97
Momentum 24h
2
Posts
2
Origins
2
Source types
1
Duplicate ratio
0%
Why now
  • Venon was first identified last month, indicating a recent and active threat.
  • The combination of malware and human operators represents an evolution in attack tactics.
  • Brazil's Pix system is a critical financial infrastructure increasingly targeted by cybercriminals.
Why it matters
  • Venon malware uses advanced Rust-based techniques and DLL side-loading, complicating detection and removal.
  • Real-time human operator involvement increases the effectiveness and timing of attacks on Brazil's Pix payment system.
  • The campaign highlights growing sophistication in banking malware targeting Brazilian financial users.
LLM analysis
Topic mix: lowPromo risk: lowSource quality: medium
Recurring claims
  • Venon is a Rust-based banking malware infecting Windows systems using DLL side-loading.
  • The latest banking Trojan campaign in Brazil combines malware with real-time human operators to attack Pix users.
How sources frame it
  • SC Media: neutral
  • Dark Reading: neutral
All evidence
All evidence
New Rust-based banking malware 'VENON' targets Brazilian users
SC Media · scworld.com · 2026-03-13 21:08 UTC
Real-Time Banking Trojan Strikes Brazil's Pix Users
Dark Reading · darkreading.com · 2026-03-13 13:00 UTC
Show filters & breakdown
Posts loaded: 0Publishers: 2Origin domains: 2Duplicates: -
Showing 2 / 0
Top publishers (this list)
  • SC Media (1)
  • Dark Reading (1)
Top origin domains (this list)
  • scworld.com (1)
  • darkreading.com (1)