Bizarro is yet another banking Trojan family originating from Brazil that is now found in other regions of the world.
Users are being targeted in Spain, Portugal, France and Italy.
Attempts have now been made to steal credentials from customers of 70 banks from different European and South American countries.
Following in the footsteps of Tetrade, Bizarro is using affiliates or recruiting money mules to operationalize their attacks, cashing out or simply to helping with transfers.
Bizarro has x64 modules and is able to trick users into entering two-factor authentication codes in fake pop-ups. It may also use social engineering to convince victims to download a smartphone app.
The group behind Bizzaro uses servers hosted on Azure and Amazon (AWS) and compromised WordPress servers to store the malware and collect telemetry.
Bizarro banking Trojan expands its attacks to Europe
