JanelaRAT: A Financial Threat Targeting Users in Latin America

Date: 04/15/2026

Severity: High

Summary

JanelaRAT is a malware family named after the Portuguese word “janela,” meaning “window.” It targets financial and cryptocurrency data from selected banks and institutions in Latin America. The malware is a modified version of BX RAT and has been active since June 2023. Unlike BX RAT, it uses a custom title bar detection method to identify specific websites in a victim’s browser. Its operators frequently enhance the infection process and update the malware with new features.

Indicators of Compromise (IOC) List

Gurucul Threat Detection and Incident Response (TDIR) Queries for Detection

Reference:  

https://securelist.com/janelarat-financial-threat-in-latin-america/119332/