Grandoreiro banking trojan campaign keeps targeting Mexico, Latin America, Europe, and North America with DLL sideloading

The long-running Grandoreiro banking trojan is still actively targeting people and organizations in Latin America, Europe, and North America, with a recent campaign heavily aimed at Mexico. Acronis says recent Windows samples abuse the legitimate Duplicate Files Finder application for DLL sideloading, which loads malicious code through a trusted program, and use anti-analysis checks such as sandbox and virtual-machine detection before contacting command-and-control servers.