Banking Trojan Mispadu Linked to 20 Spam Campaigns Across Latin America

The campaigns have affected individuals in Chile, Mexico, Peru, and Portugal. The attackers send a fake overdue invoice as an HTML page or a password-protected PDF file to lure victims. Mispadu gathers the list of antivirus solutions installed on the compromised host, steals Google Chrome and Microsoft Outlook credentials, and submits the collected data to its C2 servers.