Attacks with the novel TOINTOIN banking trojan have been deployed against the Windows systems of businesses in Latin America since May, according to The Hacker News. Threat actors commence the intrusions through phishing emails that include a link redirecting to an Amazon EC2-hosted ZIP archive, which enables persistence through an LNK file in the Windows Startup folder before retrieving six additional payloads as MP3 files from a remote server, a report from Zscaler revealed.

Source: SC Magazine