New Coyote Malware Variant Exploits Windows UI Automation to Steal Banking Credentials

The Windows banking trojan known asCoyotehas become the first known malware strain to exploit the Windows accessibility framework calledUI Automation(UIA) to harvest sensitive information. "The new Coyote variant is targeting Brazilian users, and uses UIA to extract credentials linked to 75 banking institutes' web addresses and cryptocurrency exchanges," Akamai security researcher Tomer Peledsaidin an analysis. Coyote, first revealed by Kaspersky in 2024, isknownfor targeting Brazilian users. It...