Brazilian law enforcement, assisted by ESET, has dismantled the Grandoreiro malware operation, resulting in the arrest of top operatives. Grandoreiro, a Latin American banking trojan active since 2017, targeted countries like Spain, Mexico, Brazil, and Argentina. The operation revealed a flaw in Grandoreiro’s network protocol, allowing the identification of victim patterns, and the banking trojan’s capabilities included data theft through keyloggers and overlays to collect bank login information. The disruption targeted high-ranking individuals within the Grandoreiro operation hierarchy.