Trend Micro Collaborated with Interpol in Cracking Down Grandoreiro Banking Trojan | Trend Micro (US)<\/title> <link href=\"https:\/\/fonts.googleapis.com\/css?family=Open+Sans:300,300i,400,400i,600\" rel=\"stylesheet\">\n<link href=\"\/\/customer.cludo.com\/css\/296\/1798\/cludo-search.min.css\" type=\"text\/css\" rel=\"stylesheet\"> <link rel=\"stylesheet\" href=\"\/etc.clientlibs\/trendresearch\/clientlibs\/clientlib-trendresearch.min.css\" type=\"text\/css\">\n<link rel=\"stylesheet\" href=\"\/etc.clientlibs\/trendmicro\/clientlibs\/trendmicro-core-2\/clientlibs\/header-footer.min.css\" type=\"text\/css\"> <meta property=\"og:url\" content=\"https:\/\/www.trendmicro.com\/en_us\/research\/24\/d\/trend-micro-collaborated-with-interpol-in-cracking-down-grandore.html\"><br \/>\n<meta property=\"og:title\" content=\"Trend Micro Collaborated with Interpol in Cracking Down Grandoreiro Banking Trojan \"><br \/>\n<meta property=\"og:site_name\" content=\"Trend Micro\"><br \/>\n<meta property=\"og:image\" content=\"https:\/\/www.trendmicro.com\/content\/dam\/trendmicro\/global\/en\/research\/thumbnails\/24\/GrandoreiroMain.jpg\"><br \/>\n<meta property=\"og:locale\" content=\"en_US\"> <meta name=\"twitter:card\" content=\"summary_large_image\"><br \/>\n<meta name=\"twitter:site\" content=\"@TrendMicro\"><br \/>\n<meta name=\"twitter:title\" content=\"Trend Micro Collaborated with Interpol in Cracking Down Grandoreiro Banking Trojan \"><br \/>\n<meta name=\"twitter:image\" content=\"https:\/\/www.trendmicro.com\/content\/dam\/trendmicro\/global\/en\/research\/thumbnails\/24\/GrandoreiroMain.jpg\"> <\/head> <body class=\"articlepage page basicpage context-business\" id=\"readabilityBody\" readability=\"50.442282007251\">  <a id=\"page-scroll\" title=\"VerticalPageScroll\" href=\"javascript:jumpScroll($(this).scrollTop());\"> <span class=\"icon-chevron-up\"><\/span> <\/a>  <\/p>\n<div class=\"root responsivegrid\">\n<div class=\"aem-Grid aem-Grid--12 aem-Grid--default--12 \">\n<div class=\"articleBodyNoHero aem-GridColumn aem-GridColumn--default--12\">\n<div class=\"research-layout article container\" role=\"contentinfo\">\n<article class=\"research-layout--wrapper row\" data-article-pageid=\"377564261\">\n<div class=\"col-xs-12 col-md-12 one-column\">\n<div class=\"col-xs-12 col-md-12\" readability=\"9.7841726618705\">\n<div class=\"article-details\" role=\"heading\" readability=\"39.136690647482\"> <span class=\"article-details__bar\" role=\"img\"><\/span> <\/p>\n<p class=\"article-details__display-tag\">Malware<\/p>\n<p class=\"article-details__description\">In this blog entry, we discuss Trend Micro’s contributions to an Interpol-coordinated operation to help Brazilian and Spanish law enforcement agencies analyze malware samples of the Grandoreiro banking trojan.<\/p>\n<p class=\"article-details__author-by\">By: Joshua Paul Ignacio, Paul Pajares, Paul John Bardon <time class=\"article-details__date\">April 24, 2024<\/time> <span>Read time: <\/span><span class=\"eta\"><\/span> (<span class=\"words\"><\/span> words) <\/p>\n<div class=\"article-details__icons\">  <\/p>\n<div class=\"a2a_kit a2a_default_style\" data-a2a-icon-color=\"#717172\"> <a class=\"a2a_dd addthis_link\" href=\"https:\/\/www.addtoany.com\/share\"> <img decoding=\"async\" src=\"https:\/\/www.trendmicro.com\/etc.clientlibs\/trendresearch\/clientlibs\/clientlib-trendresearch\/resources\/img\/share-more.svg\" class=\"svg-icon\" alt=\"Share\"> <\/a> <a class=\"a2a_button_print addthis_link\"> <img decoding=\"async\" src=\"https:\/\/www.trendmicro.com\/etc.clientlibs\/trendresearch\/clientlibs\/clientlib-trendresearch\/resources\/img\/printer.svg\" class=\"svg-icon\" alt=\"Print\"> <\/a> <\/div>\n<p>   <\/div>\n<\/div><\/div>\n<\/p><\/div>\n<hr class=\"research-layout-divider\"> <main class=\"main--content col-xs-12 col-lg-8 col-lg-push-2\"> <\/p>\n<div class=\"richText\" readability=\"41.038732394366\">\n<div readability=\"28.336267605634\">\n<p>Last April 2023, the International Criminal Police Organization (Interpol) requested any indicators of compromise (IOCs) or information related to the banking trojan Grandoreiro, specifically for command-and-control (C&C) servers. Grandoreiro has evolved with new features and capabilities since it first appeared around 2018, and has been primarily targeting users in Latin America and Europe. Trend Micro was one of the partners involved in Interpol\u2019s operation to help Brazilian and Spanish law enforcement agencies (LEAs) analyze Grandoreiro malware samples as part of their national cybercrime investigations. The <a href=\"https:\/\/www.interpol.int\/en\/News-and-Events\/News\/2024\/Disrupting-a-Grandoreiro-malware-operation\" target=\"_blank\" rel=\"noopener\">Interpol-coordinated operation<\/a> resulted in the arrest of five administrators behind a Grandoreiro operation, as <a href=\"https:\/\/www.gov.br\/pf\/pt-br\/assuntos\/noticias\/2024\/01\/pf-combate-organizacao-criminosa-que-praticava-fraudes-bancarias-eletronicas-contra-vitimas-no-exterior\" target=\"_blank\" rel=\"noopener\">announced<\/a> by the Brazilian authorities.<\/p>\n<p>Grandoreiro spreads through phishing emails, malicious attachments, or links leading to fake websites. These emails often impersonate legitimate organizations, such as banks or financial institutions, to trick users into downloading and executing the malware. Once installed on a victim\u2019s system, Grandoreiro operates as a typical banking trojan, aiming to steal sensitive financial information. Over time, Grandoreiro has undergone various updates and modifications, enhancing its evasion techniques and obfuscation methods to evade detection by antivirus software and security measures.<\/p>\n<h4>Trend\u2019s Contributions<\/h4>\n<p>Here\u2019s the summary of Trend\u2019s contributions to the operation:<\/p>\n<ul>\n<li><span class=\"rte-red-bullet\">Trend threat intelligence data from January to April 2023 showed that Argentina recorded the highest number of detections related to Grandoreiro with 1,118 detections, followed by Turkey with 322 detections, and Mexico with 265 detections (Figure 1).<\/span><\/li>\n<\/ul><\/div>\n<\/p><\/div>\n<div class=\"image\" readability=\"6\">\n<figure class=\"image-figure\" readability=\"2\"> <img decoding=\"async\" src=\"https:\/\/www.trendmicro.com\/content\/dam\/trendmicro\/global\/en\/research\/24\/d\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan\/GrandoreiroFig5.png\" alt=\"Figure 1. Highest number of Grandoreiro detections by country\"> <\/p>\n<p><figcaption>Figure 1. Highest number of Grandoreiro detections by country<\/figcaption><\/p>\n<\/figure><\/div>\n<div>\n<div class=\"richText\">\n<div>\n<ul>\n<li><span class=\"rte-red-bullet\">Trend provided an additional list of banks\/strings found on a sample. These were utilized to monitor the browsing activity of the user by cross-referencing the window to check if it matches specific strings. The list of strings can be accessed at the end of this article.<\/span><\/li>\n<li><span class=\"rte-red-bullet\">During the investigation, it was discovered that Grandoreiro utilized domain generation algorithms (DGAs) for its C&C communications. To gain further insights, Trend generated all possible domains from the list of strings and subdomains found on multiple samples. As a result, more than 4,000 DGAs were generated, providing valuable information to pivot to the C&C servers used by Grandoreiro at that time.<\/span><\/li>\n<li><span class=\"rte-red-bullet\">The admin panel is crucial for investigation on the scale of attack of threat actors and the identification of victims. Using the open-source tool URLScan (urlscan.io), Trend recommended inspecting three active admin panels with their respective locations. The following were the URLs of the admin panels and the screenshot of login page (Figure 2):<\/span><\/li>\n<li><span class=\"rte-circle-bullet\">185.191.228[.]227\/autorizar.php (United States)<\/span><\/li>\n<li><span class=\"rte-circle-bullet\">192.95.6[.]196\/23112022new\/autorizar.php (Canada)<\/span><\/li>\n<li><span class=\"rte-circle-bullet\">51.77.193[.]20\/eliteseguros\/autorizar.php (France)<\/span><\/li>\n<\/ul><\/div>\n<\/p><\/div>\n<div class=\"image\" readability=\"6\">\n<figure class=\"image-figure\" readability=\"2\"> <img decoding=\"async\" src=\"https:\/\/www.trendmicro.com\/content\/dam\/trendmicro\/global\/en\/research\/24\/d\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan\/GrandoreiroFig2.png\" alt=\"Figure 2. Screenshot of the login page\"> <\/p>\n<p><figcaption>Figure 2. Screenshot of the login page<\/figcaption><\/p>\n<\/figure><\/div>\n<div class=\"richText\">\n<div>\n<ul>\n<li><span class=\"rte-red-bullet\">Trend recommended to inspect the file storage Dropbox where the malicious email attachment was hosted and contained a name of the uploader. It was highly likely a fake name although we believe it can help in attribution. Figures 3 and 4 show the Dropbox accounts with the names \u201cRITA MENDES\u201d and \u201cNohemi Valdes\u201d, respectively:<\/span><\/li>\n<\/ul><\/div>\n<\/p><\/div>\n<div class=\"image\" readability=\"6\">\n<figure class=\"image-figure\" readability=\"2\"> <img decoding=\"async\" src=\"https:\/\/www.trendmicro.com\/content\/dam\/trendmicro\/global\/en\/research\/24\/d\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan\/GrandoreiroFig3.png\" alt=\"Figure 3. Dropbox storage with the uploader name \u201cRITA MENDEZ\u201d\"> <\/p>\n<p><figcaption>Figure 3. Dropbox storage with the uploader name \u201cRITA MENDEZ\u201d<\/figcaption><\/p>\n<\/figure><\/div>\n<div class=\"image\" readability=\"6\">\n<figure class=\"image-figure\" readability=\"2\"> <img decoding=\"async\" src=\"https:\/\/www.trendmicro.com\/content\/dam\/trendmicro\/global\/en\/research\/24\/d\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan\/GrandoreiroFig4.png\" alt=\"Figure 4. Dropbox storage with the uploader name \u201cNohemi Valdes\u201d\"> <\/p>\n<p><figcaption>Figure 4. Dropbox storage with the uploader name \u201cNohemi Valdes\u201d<\/figcaption><\/p>\n<\/figure><\/div>\n<div class=\"richText\">\n<div>\n<ul>\n<li><span class=\"rte-red-bullet\">Trend provided an analysis of Grandoreiro\u2019s utilization of VBScript (VBS) for its malicious routine, as shown in Figure 5.<\/span><\/li>\n<\/ul><\/div>\n<\/p><\/div>\n<div class=\"image\" readability=\"6\">\n<figure class=\"image-figure\" readability=\"2\"> <img decoding=\"async\" src=\"https:\/\/www.trendmicro.com\/content\/dam\/trendmicro\/global\/en\/research\/24\/d\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan\/GrandoreiroFig1.png\" alt=\"Figure 5. Infection chain of Grandoreiro using VBS\"> <\/p>\n<p><figcaption>Figure 5. Infection chain of Grandoreiro using VBS<\/figcaption><\/p>\n<\/figure><\/div>\n<div class=\"richText\" readability=\"34.901433691756\">\n<div readability=\"19.287634408602\">\n<h4>Cooperation with Interpol<\/h4>\n<p>These contributions are the latest in Trend\u2019s long track record of successful collaborations with international law enforcement. Collaborations between law enforcement and the private sector provide security organizations and industry specialists the opportunity to share their expertise, resources, and years-long experience with LEAs such as Interpol to enhance their cybercrime combating efforts in effectively targeting and dismantling malicious actors.<\/p>\n<p>Trend\u2019s ongoing cooperation with Interpol has been instrumental in a series of prominent crackdowns throughout the years: These include the dismantling of <a href=\"https:\/\/www.trendmicro.com\/en_us\/research\/23\/i\/revisiting-16shop-phishing-kit-trend-interpol-partnership.html\" target=\"_blank\" rel=\"noopener\">the 16shop phishing kit<\/a> and the disruption of African cybercrime networks during <a href=\"https:\/\/www.trendmicro.com\/en_us\/research\/23\/h\/african-cybercrime-networks.html\" target=\"_blank\" rel=\"noopener\">Africa Cyber Surge I and II<\/a> in 2023, the apprehension of business email compromise (BEC) actors under <a href=\"https:\/\/www.trendmicro.com\/en_us\/research\/22\/f\/trend-micro-partners-with-interpol-and-nigeria-efcc-for-operatio.html\" target=\"_blank\" rel=\"noopener\">Operation Killer Bee<\/a> in 2022, and the capture of REvil and Cl0p syndicate members as part of <a href=\"https:\/\/www.trendmicro.com\/en_us\/research\/21\/k\/global-operations-lead-to-arrests-of-alleged-members-of-gandcrab.html\" target=\"_blank\" rel=\"noopener\">Operation Cyclone<\/a> in 2021. This partnership endures as Trend persists in its commitment to securing our increasingly connected world.<\/p>\n<p><i>The list of banks\/strings found on a sample can be viewed <a href=\"https:\/\/www.trendmicro.com\/content\/dam\/trendmicro\/global\/en\/research\/24\/d\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan\/OperationGrandoreiroStrings.txt\" target=\"_blank\" rel=\"noopener\">here<\/a>.<\/i><\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<section class=\"tag--list\">\n<p>Tags<\/p>\n<\/section>\n<p> <\/main> <\/article>\n<\/div>\n<\/div><\/div>\n<\/div>\n<p>   <\/p>\n<p> <span>sXpIBdPeKzI9PC2p0SWMpUSM2NSxWzPyXTMLlbXmYa0R20xk<\/span> <\/p>\n<p>  <\/body> Read More <a href=\"https:\/\/www.trendmicro.com\/en_us\/research\/24\/d\/trend-micro-collaborated-with-interpol-in-cracking-down-grandore.html\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>In this blog entry, we discuss Trend Micro’s contributions to an Interpol-coordinated operation to help Brazilian and Spanish law enforcement agencies analyze malware samples of the Grandoreiro banking trojan. Read More HERE…<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[61],"tags":[9534,9513],"class_list":["post-55913","post","type-post","status-publish","format-standard","hentry","category-trendmicro","tag-trend-micro-research-latest-news","tag-trend-micro-research-malware"],"yoast_head":"\n<title>Trend Micro Collaborated with Interpol in Cracking Down Grandoreiro Banking Trojan 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Trend Micro Collaborated with Interpol in Cracking Down Grandoreiro Banking Trojan 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2024-04-24T00:00:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.trendmicro.com\/content\/dam\/trendmicro\/global\/en\/research\/24\/d\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Trend Micro Collaborated with Interpol in Cracking Down Grandoreiro Banking Trojan\",\"datePublished\":\"2024-04-24T00:00:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan\\\/\"},\"wordCount\":760,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.trendmicro.com\\\/content\\\/dam\\\/trendmicro\\\/global\\\/en\\\/research\\\/24\\\/d\\\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan\",\"keywords\":[\"Trend Micro Research : Latest News\",\"Trend Micro Research : Malware\"],\"articleSection\":[\"TrendMicro\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan\\\/\",\"name\":\"Trend Micro Collaborated with Interpol in Cracking Down Grandoreiro Banking Trojan 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.trendmicro.com\\\/content\\\/dam\\\/trendmicro\\\/global\\\/en\\\/research\\\/24\\\/d\\\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan\",\"datePublished\":\"2024-04-24T00:00:00+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.trendmicro.com\\\/content\\\/dam\\\/trendmicro\\\/global\\\/en\\\/research\\\/24\\\/d\\\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan\",\"contentUrl\":\"https:\\\/\\\/www.trendmicro.com\\\/content\\\/dam\\\/trendmicro\\\/global\\\/en\\\/research\\\/24\\\/d\\\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Trend Micro Research : Latest News\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/tag\\\/trend-micro-research-latest-news\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Trend Micro Collaborated with Interpol in Cracking Down Grandoreiro Banking Trojan\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n","yoast_head_json":{"title":"Trend Micro Collaborated with Interpol in Cracking Down Grandoreiro Banking Trojan 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan\/","og_locale":"en_US","og_type":"article","og_title":"Trend Micro Collaborated with Interpol in Cracking Down Grandoreiro Banking Trojan 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2024-04-24T00:00:00+00:00","og_image":[{"url":"https:\/\/www.trendmicro.com\/content\/dam\/trendmicro\/global\/en\/research\/24\/d\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Trend Micro Collaborated with Interpol in Cracking Down Grandoreiro Banking Trojan","datePublished":"2024-04-24T00:00:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan\/"},"wordCount":760,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan\/#primaryimage"},"thumbnailUrl":"https:\/\/www.trendmicro.com\/content\/dam\/trendmicro\/global\/en\/research\/24\/d\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan","keywords":["Trend Micro Research : Latest News","Trend Micro Research : Malware"],"articleSection":["TrendMicro"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan\/","url":"https:\/\/www.threatshub.org\/blog\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan\/","name":"Trend Micro Collaborated with Interpol in Cracking Down Grandoreiro Banking Trojan 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan\/#primaryimage"},"thumbnailUrl":"https:\/\/www.trendmicro.com\/content\/dam\/trendmicro\/global\/en\/research\/24\/d\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan","datePublished":"2024-04-24T00:00:00+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan\/#primaryimage","url":"https:\/\/www.trendmicro.com\/content\/dam\/trendmicro\/global\/en\/research\/24\/d\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan","contentUrl":"https:\/\/www.trendmicro.com\/content\/dam\/trendmicro\/global\/en\/research\/24\/d\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan"},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Trend Micro Research : Latest News","item":"https:\/\/www.threatshub.org\/blog\/tag\/trend-micro-research-latest-news\/"},{"@type":"ListItem","position":3,"name":"Trend Micro Collaborated with Interpol in Cracking Down Grandoreiro Banking Trojan"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/55913","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=55913"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/55913\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=55913"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=55913"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=55913"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}

{"id":55913,"date":"2024-04-24T00:00:00","date_gmt":"2024-04-24T00:00:00","guid":{"rendered":"urn:uuid:ef9ca989-0459-746c-d9de-5c2a71c23a1a"},"modified":"2024-04-24T00:00:00","modified_gmt":"2024-04-24T00:00:00","slug":"trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/trend-micro-collaborated-with-interpol-in-cracking-down-grandoreiro-banking-trojan\/","title":{"rendered":"Trend Micro Collaborated with Interpol in Cracking Down Grandoreiro Banking Trojan"},"content":{"rendered":"