
BBTok, a sophisticated banking malware, continues to evolve since its initial identification in 2020. Primarily targeting Latin America, the malware’s recent campaigns have especially focused on users in Mexico and Brazil. Researchers from GDataSoftware have delved deep into its sophisticated infection chain, revealing a complex combination of PowerShell, Python, and dnlib to effectively compromise and remain hidden in targeted systems.