OFFICIAL PUBLIC NOTICE

NITDA’s Computer Emergency Readiness and Response Team (CERRT) has issued a crucial warning about a highly advanced malware called Grandoreiro that poses a serious threat to personal and financial data. This sophisticated malware employs techniques such as screen overlay attacks and remote device control to steal sensitive information, including banking credentials and personal details.

The malware spreads through phishing emails and deceptive websites, luring unsuspecting victims into downloading malicious software disguised as legitimate updates or documents. Once it infiltrates a device, Grandoreiro bypasses security systems, granting cybercriminals unauthorized access and putting victims at risk of significant financial loss and identity theft.

NITDA urges everyone to remain vigilant and adopt effective security practices to mitigate the risks posed by this evolving cyber threat. The agency advises avoiding links and attachments from unknown emails, downloading software exclusively from trusted sources, and enabling multifactor authentication to secure financial accounts. Keeping antivirus software up to date, avoiding public Wi-Fi for sensitive transactions, and regularly monitoring bank accounts for unauthorized activities are also critical measures to stay protected.

In its advisory, NITDA emphasized the importance of proactive cybersecurity measures in combating threats like Grandoreiro. Staying alert and implementing these recommendations can help individuals safeguard their data and avoid falling victim to cybercriminals.