CarnavalHeist is a new banking trojan targeting Brazilian users and has been active since February 2024. This malware stands out for using a Python-based loader and targets banking desktop applications, stealing credentials through overlay attacks and keylogging.
