New Banking Trojans Grandoreiro and BTMOB Hit Windows and Android

Robert Moore · 2026-05-27

Two major banking trojan campaigns are making waves across Latin America and Europe, targeting Windows and Android users with sophisticated malware. Security researchers at WatchGuard and ESET recently uncovered these threats, which are actively infecting devices in Spain, Portugal, Mexico, and Brazil. ### What Are Grandoreiro and BTMOB? Grandoreiro is a Windows-based banking trojan that steals login credentials and financial data from infected computers. It often spreads through phishing emails or malicious downloads. BTMOB, on the other hand, is a Remote Access Trojan (RAT) designed for Android devices, giving attackers full control over your smartphone. Together, these malware families represent a serious risk for businesses and individuals alike.  ### How Do They Spread? Attackers use a mix of tactics to trick victims. Common methods include: - Phishing emails that appear to be from trusted banks or companies - Fake app downloads that look legitimate but contain malware - Malicious links shared through social media or messaging apps Once installed, Grandoreiro can record keystrokes, capture screenshots, and steal passwords. BTMOB can access your contacts, messages, and even your camera. It's a scary thought, but staying informed is your best defense. ### Who Is at Risk? According to the reports, companies in Spain, Portugal, and Mexico are primary targets for Grandoreiro. Mobile users in Brazil are especially vulnerable to BTMOB. But don't let your guard down if you're elsewhere. Cybercriminals often expand their reach, so anyone using Windows or Android should take precautions. ### How to Protect Yourself Here are some practical steps to stay safe: - Keep your operating system and apps updated. Updates often patch security holes. - Avoid clicking on links in unsolicited emails. If it looks fishy, it probably is. - Use strong, unique passwords for each account. A password manager can help. - Install antivirus software and run regular scans. - Be cautious when downloading apps. Stick to official stores like Google Play. ### Why This Matters for You Banking trojans aren't just a problem for big corporations. They can drain your personal bank account or steal your identity. The fact that these campaigns target both Windows and Android means nearly everyone is a potential victim. Taking action now can save you a lot of headaches later. ### Final Thoughts The digital world is full of threats, but knowledge is power. By understanding how Grandoreiro and BTMOB work, you can spot red flags and protect your devices. Stay vigilant, keep your software updated, and always think twice before clicking. Your financial safety depends on it.