Rust-Based VENON Malware Targets 33 Brazilian Banks with Credential

Back Thehackernews

Rust-Based VENON Malware Targets 33 Brazilian Banks with Credential

Thehackernews •[email protected] (The Hacker News) • March 12, 2026

Share: View original

A practical deep dive into securing AI agents against real-world attack paths beyond the model itself.

See exactly where your controls stand against today’s threats—automated, accurate, approachable.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

VENON Malware Targets 33 Brazilian Banks with Rust-Based Attack A new banking malware named VENON has been identified, specifically targeting users in Brazil. This malware, developed in Rust, represents a shift from the previously common Delphi-based variants in the region. VENON mimics behaviors of established banking trojans like Grandoreiro and Mekotio, employing banking overlay techniques and monitoring active windows. Discovered by Brazilian cybersecurity firm ZenoX, VENON infects Windows systems using a sophisticated infection chain that includes DLL side-loading. It utilizes social engineering tactics, such as ZIP archives delivered via PowerShell scripts, to deceive users into executing the malware. The malware targets 33 financial institutions and digital asset platforms, replacing legitimate application shortcuts with malicious ones to steal user credentials. It incorporates nine evasion techniques, including anti-sandbox measures and AMSI bypasses, and establishes a WebSocket connection to its command-and-control server. An earlier version of VENON was noted in January 2026, with indications of AI assistance in its development. 3 sources 65

Extracted Entities

Attack Types (1)

Malware (1)