AllaKore RAT’s Grip Tightens on Mexican Financial Institutions

Amber | Vulnerability Report

A threat actor has been targeting Mexican banks and cryptocurrency trading since at least 2021. Using custom installers, the actor distributes a modified version of the AllaKore RAT, an open-source remote access tool. The campaign cleverly mimics the Mexican Social Security Institute (IMSS) in its lures, embedding links in seemingly legitimate documents during the initial stage.

Reduce real exposure. Not just vulnerability volume.