Credential theft is a threat that has been plaguing the world for over a decade. In Latin America, it is growing steadily in tandem with digitalization and the rise in online fraud. Last year alone, more than 2.6 million credentials were compromised in the region, according to a 2025 SOCRadar report.

This material is of educational interest to both advanced and frequent users, as well as basic and occasional users, and we should pay attention to it. It may be useful to archive and preserve it. Keep in mind that all countries and internet users have some degree of vulnerability and are therefore at risk. No one is immune to this risk; we must act preventively to reduce or mitigate it.

ESET, a leading company in proactive threat detection, warns that access to an email account allows attackers to access banking services, corporate platforms, financial information, and even medical records.

The ways cybercriminals obtain user passwords vary in difficulty and technical expertise. ESET categorizes them into three methodologies: those that exploit social engineering techniques, those that use malware, and those that result from an attack on the organization that should be protecting them.

What methodologies do hackers use?

1.Social Engineering Techniques:

This method falsely uses the names of public entities or well-known companies to lower suspicion and increase the effectiveness of attacks. The most common method is sending emails or messaging applications in which the attacker impersonates a legitimate entity to deceive the victim and persuade them to voluntarily hand over their login credentials.

These messages share a common characteristic: they appeal to urgency and simulate a notification of a problem requiring immediate action: account issues, a rejected payment, problems with a reservation, among countless other excuses. They often contain a malicious link to sites that mimic legitimate ones to steal victims’ sensitive data, such as passwords and usernames.

Another form phishing takes is through fake websites that rank highly in search engine results like Google with sponsored ads, because the attacker pays for visibility to impersonate real pages. In these scenarios, even cautious people can be tricked into clicking on a seemingly legitimate result that replicates the visual identity of banks, email platforms, cloud services, or reputable companies.

2.Distribution of specific malware:

Another common way to steal passwords is through the use of malware, which activates once the user’s device has been compromised. In these cases, ESET explains, there is no specific deception or alert message; instead, the theft occurs in the background, often without the victim noticing.

Infostealers, keyloggers, and spyware all share the common characteristic of continuously collecting sensitive information, including passwords stored in browsers, autofill data, application credentials, and active sessions. The impact of these types of malware is not limited to a single account, as the malicious program continues to collect credentials as long as the user uses the infected device, ESET points out.

Within this same ecosystem, banking Trojans emerge, specifically targeting login credentials for bank accounts and financial platforms. Through fake windows, they capture data the moment the user enters it. This type of threat, not new to the region, exceeded 650,000 unique detections in 2025, 110,000 of which belonged to a single family: Guildma.

3.Attacks on organizations:

Another significant source of credential theft is incidents where an organization’s databases are exposed due to a weakness or failure in its systems. In the most critical scenarios, leaks include complete credentials, either in plain text or with weak security mechanisms, allowing attackers to reuse them immediately. However, even when passwords are not directly exposed, leaked emails or usernames remain valuable to malicious actors. This information is then used as the basis for credential stuffing or brute-force attacks, exploiting the reuse of passwords across different services.

Once a database is compromised, the information can circulate for years in underground forums and be reused in different contexts and against multiple platforms. In this way, a single breach in one organization ends up amplifying the risk for other companies and for users themselves, even long after the original incident has been fixed.

“There are also brute-force threats. These consist of automatically trying multiple username and password combinations until successful access is achieved, without needing to deceive the user or compromise their device beforehand. They typically rely on lists of common passwords or credentials leaked in previous incidents, taking advantage of password reuse and the lack of additional authentication controls. When exposed services lack mechanisms to limit login attempts or adequate monitoring, this type of attack remains effective, especially against remote access, web applications, and corporate services published on the internet,” comments Martina López, Cybersecurity Researcher at ESET Latin America.

It is advisable to combine and add best practices with preventative measures

Credential theft by cybercriminals can occur through various vectors. The ESET research team maintains that prevention does not depend on taking a single measure, but rather on a combination of practices:

• Use unique and strong passwords for each service, since credential stuffing is common among cyberattackers using credentials that are sold commercially.
• Enable multifactor authentication whenever possible, as this mechanism complements and strengthens the passwords you use.
• Be wary of unexpected messages and avoid downloading files or clicking on suspicious links, as malware and phishing remain the most common ways credentials are stolen.
• Store passwords in password managers and avoid saving them in plain text or on shared devices.
• Keep systems and applications updated to patch any vulnerabilities.
• Review unusual access and activity on your accounts, either by keeping login alerts enabled or by checking the privacy or access settings of your applications.

In the event that a password has already been stolen, ESET emphasizes that reaction time makes the difference between an isolated incident and a major problem. Therefore, they recommend:

• Change the affected passwords and any others where the same credentials were used.
• Close active sessions on the affected account and revoke recent access in services and applications where possible.
• Check for unauthorized changes to accounts and monitor for future changes to messages, settings, payments, and other data.
• Use a security tool on potentially affected devices to remove any malicious code.

“While password theft is not a new problem, it continues to grow and adapt to new technologies, along with our increasingly complex digital lives. In this context, digital literacy and best practices become essential to protect our identity, information, and devices at both the individual and corporate levels. Staying informed is vital to staying ahead of the latest cybersecurity trends,” concludes López from ESET.

ESET invites you to learn more about cybersecurity by visiting: https://www.welivesecurity.com/es/.

For other useful preventative information, also available in Venezuela at:  https://www.eset.com/ve/, and on their social media channels @eset_ve. Also on Instagram (@esetla) and Facebook (ESET).

Information and images provided by ESET and Comstat Rowland

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada Recommendations to reduce credential theft: This digital risk is very common in Latin America apareció primero en Bitfinance.

A new year has begun, full of challenges, obstacles, and, of course, goals to achieve in the realm of business and sales activities. Specialist Carlos Rosales, director and founder of Consultores Neurosales, with recognized expertise and an international reputation for his performance in this broad field, and more specifically in everything related to sales, begins his new cycle of contributions to our media group, making available to readers and users, and sparking their interest, a framework or path to consider. We will share these highly relevant and useful articles throughout 2026, illuminating the path to decision-making.

“Selling today is nothing like selling five years ago. Customers are better informed, cycles are longer, and old tactics no longer have an impact. Many experience it as an exhausting routine, a sequence of calls and presentations that no longer moves the needle. But this discomfort isn’t a problem; it’s an invitation to level up.”

– In my concept of the sales hero’s journey, I propose that every sales professional faces, sooner or later, the same twelve stages that heroes in their stories generally experience. It’s not a literary device, but a practical way to understand why we stagnate and how to move forward with greater clarity.

“Exactly, it all starts in the ordinary world: processes that run on autopilot, a lack of focus, and a market that demands more than we give. When the usual approach stops being enough, the call to adventure arises. The challenge lies in listening to it without falling into excuses like ‘my sector is different’ or ‘I don’t have time.’ These are comfortable barriers that prevent growth.”

From the product to value

– Real change comes when we accept the guidance of a mentor, whether it’s a book, a trainer, or a role model: someone who shakes us up, challenges us, and pushes us to try something different. Crossing the threshold isn’t planning, it’s deciding. It’s moving from intentions to action: implementing a CRM properly, personalizing messages, or transforming a product-centric presentation into a value-centric one.

“On the way, challenges, allies, and enemies appear. Customer rejections weigh heavily, but they sharpen our judgment. Ego and routine become dangerous rivals. Discipline and data become our compass. And sooner or later, we reach the deepest cave, that point where everything gets dirty: stagnation, doubt, lack of results. That’s where it’s determined who retreats and who is reborn.”

– The great test often takes the form of a difficult negotiation or a goal that seems out of reach. Overcoming it depends not only on techniques, but also on composure and vision. The reward isn’t just the contract, but the internal authority gained by demonstrating our ability to withstand pressure.

“Then comes the journey back, where we apply what we’ve learned with greater confidence. And there’s always one last challenge that reinforces our evolution before we return with the elixir: experience, conviction, and the ability to inspire others.”

– Each sales cycle is a journey. What changes everything is how you choose to experience it: from fear or from purpose. What stage are you at today?

 About the author

Carlos Rosales is a postgraduate professor at several universities in Colombia, Panama, Venezuela, and Guatemala. He is the author of the books “People Buy People,” “People Buy Leaders,” and “Epic Sales Blunders,” with over 90,000 copies sold. He trains sales professionals throughout Latin America and is a high-impact speaker and mentor.

Recognized by LinkedIn as one of the Top Voices in Latin America and by GOIntegro as one of the Top 12 HR Influencers in Colombia.

He is currently the director of Consultores Neurosales, a training and human development company with a presence throughout Latin America.

(Main reference image source: Alex Hudson on Unsplash)

BitFinance.News

Visit our news channel on Google News and follow us to get accurate, interesting information and stay up to date with everything. You can also see our daily content on X/Twitter and Instagram

La entrada C. Rosales / Neurosales analyzes and proposes “the sales hero’s journey” apareció primero en Bitfinance.

In Latin America, the mobile landscape has very clear characteristics. The region concentrates many malware detections for Android, focusing on Mexico and Brazil, according to the latest ESET Threat Report. Unlike more northerly regions or Europe, Android is the most prevalent operating system by a significant margin. In line with what ESET, a leading company in proactive threat detection, observes globally, the phone is the primary device for most people, and recent devices coexist with models that no longer receive updates. According to the research group, this mix of high dependency, fragmentation, and outdated versions creates an environment where many malicious codes find space to proliferate. This is an issue we should all be aware of, whether we are basic and occasional users or advanced and active ones.

“In addition, many of the most effective distribution channels remain fully operational in the region. SMS or messaging campaigns with direct links, modified APKs shared outside of official stores, and applications that manage to enter legitimate stores with very few reviews or signs of real activity continue to be key vectors. This ecosystem facilitates both the circulation of known malware families and the constant emergence of new or unsophisticated variants that still manage to gain traction,” comments Martina Lopez, Cybersecurity Researcher at ESET Latin America.

ESET analyzes the 3 most frequently detected malware families in the region during 2025

Trojan.Android/Exploit.CVE-2012-6636: An old vulnerability that remains present in the mobile ecosystem because many Android applications continue to use legacy components. The flaw affects apps that use WebView with an insecure configuration and that were compiled with versions prior to Android 4.2. Even if the device is modern, the application may retain this vulnerable behavior. In this context, a malicious webpage loaded within the WebView itself can interact with the app’s internal code in ways that should not be possible, opening the door to the execution of unauthorized actions.

In the current mobile threat landscape, this exploit is not usually the focus of complex campaigns, but it does appear embedded in APKs distributed outside of official app stores or present in applications that no longer receive updates. Publicly available exploits exist for CVE-2012-6636, including modules embedded in frameworks like Metasploit, making it easy for malicious actors to use. Furthermore, it was reported as one of the most prevalent Android exploits in 2023, according to the ESET Security Report 2024.

Trojan.Android/Exploit.Lotoor: This is a family of privilege escalation exploits used for over a decade to gain root access on Android devices. It encompasses a set of techniques that abuse operating system vulnerabilities in various early versions of Android, especially flaws discovered between 2010 and 2013. Under this umbrella are exploits that take advantage of errors in drivers, system services, or memory management, allowing code to be executed with privileges higher than those of the application.

Its modules continue to reappear within malicious tools that seek to activate advanced functions such as uninstalling security apps, modifying internal configurations, or installing additional payloads. This is not the first time the research team has observed Lotoor in the top spots.

Trojan.Android/Pandora: This is malicious code linked to a variant of Mirai adapted for the Android ecosystem. It was first observed in 2023 within popular streaming applications in the region, especially on Android TV boxes and sticks commonly used to access unofficial content. In these cases, attackers distribute APKs that function as legitimate streaming apps but include a malicious component capable of turning the device into part of a botnet. In some models, modified firmware was even detected that came infected from the factory, amplifying the reach of the attack.

Once installed, Pandora maintains communication with a command and control server, receives instructions, and executes the typical capabilities of a Mirai-based botnet, with the focus on launching distributed denial-of-service attacks.

“This 2025 outlook shows us that Android threats continue to rely on well-known vectors and the lack of device and application updates, which keeps exploits and vulnerabilities that have been circulating for years alive. Even so, this doesn’t mean the risk is limited to the usual suspects. Less widespread, but equally relevant, threats also persist, such as banking trojans or fraudulent lending apps, which operate in a much more targeted way and seek a direct impact on the user’s finances. And, in parallel, emerging threats and increasingly innovative techniques are appearing, such as malware capable of cloning cards via NFC, reflecting a constantly evolving mobile ecosystem with a growing level of sophistication,” concludes Lopez from ESET Latin America.

In this context, protecting information and devices from these threats becomes vital.

ESET shares the following tips to avoid becoming a victim

• Keep your device updated and don’t use older versions of Android if an update is available.
• Install applications only from official stores or verified sources.
• Avoid APKs from unknown sources, even if they promise “premium” features or free content.
• Check permissions, developer activity, and the actual number of reviews before installing an app.
• Use reliable security solutions that detect exploits, Trojans, and anomalous behavior.
• Avoid disabling system protections and prevent the installation of unknown apps.
• Be wary of messages, links, or ads that promise quick access, discounts, or special features.

ESET invites you to learn more about cybersecurity by visiting: https://www.welivesecurity.com/es/.

For other useful preventative information, also available in Venezuela: https://www.eset.com/ve/, and on their social media channels @eset_ve. Also on Instagram (@esetla) and Facebook (ESET).

Bitfinance.news

(With information and images provided by ESET and Comstat Rowland)

Visit our news channel on Google News and follow us to get accurate, interesting information and stay up to date with everything. You can also see our daily content on X/Twitter and Instagram

La entrada Cybersecurity: The malware that most attacked Android smartphones apareció primero en Bitfinance.

October marks Cybersecurity Awareness Month, a global initiative to strengthen safe habits in the digital environment. In the Latin American region, cybersecurity risks are specific. According to the latest ESET Security Report 2025, 1 in 4 companies has already suffered a cyberattack in the last year. But it’s not just businesses that are vulnerable, as massive phishing campaigns seek to attract the public and simulate messages from postal companies with supposed delivery problems, or from government agencies communicating nonexistent fines, court summonses, among many other attempts to deceive and generate urgency so that action is taken under pressure.

In this context, ESET, a leading company in proactive threat detection, warns that any user of online services is a target of attack and comments that it is necessary to address some myths that persist about digital security and that can put both personal users and corporate systems at risk.

Security is not just about technology; it is also about process and governance

THE MYTHS:

1. I am not a target because I have nothing of value: It is common for people to believe that cyberattacks only target large companies or public figures. The reality is that any personal data is valuable to cybercriminals, from banking information to email or social media credentials. Digital scams reach millions of ordinary users, regardless of their online profile or relevance.

“Underestimating the risk creates a false sense of security and leads to risky behaviors, such as not enabling multi-factor authentication, using weak passwords, or clicking on suspicious links. These weaknesses are a unique opportunity for attacks that result in data theft, card cloning, account takeovers, or even digital extortion, targeting users who believe they are not targets,” says Camilo Gutiérrez Amaya, Head of the ESET Latin America Research Lab.

2.My antivirus protects me against everything: Antivirus is an important piece of defense, but it doesn’t cover all attack vectors. Social engineering, process failures, poor privilege management, supply chain attacks, and operational visibility gaps are all actions that antivirus alone cannot address.

An example of this occurred in Brazil. The C&M Software case exposed how procedural gaps, a lack of controls, and failures in third-party management allowed resources to be diverted and compromised the organization’s operational security. This demonstrated that security is not just about technology; it’s also about process and governance. Another critical point is that many attacks exploit leaked credentials, human weaknesses, or insecure authorization flows, scenarios in which an antivirus solution fails to prevent the initial intrusion or escalation of access. Therefore, the current defense strategy must be layered.

3. My password is secure, you can use it everywhere: Even if a password is secure, reusing it across multiple services poses a risk. In practice, criminals specialize in automated attacks, such as credential stuffing, where they use leaked email and password combinations to attempt to automatically access other accounts. If the password is the same, access is immediate and silent.

On the other hand, password reuse makes scams like phishing and account takeovers more effective, because cybercriminals can combine information from different services to trick users more convincingly. Even if a platform has strong protection, using the same password on a website with weak security replicates the risk.

“Relying exclusively on strong, unique passwords creates a false sense of security and leaves users vulnerable to hacking, identity theft, and financial fraud. Effective protection requires not only strong passwords, but also a combination of multi-factor authentication, monitoring for suspicious activity, and good credential management practices,” adds Gutiérrez Amaya of ESET.

4. My phone is safe, I only have to worry about my computer: Many people believe their smartphones or tablets are protected because they are smaller or more modern devices, and that cyberattacks don’t affect them. Mobile devices are frequent targets for sophisticated scams, and the risks increase as personal, financial, and professional information is concentrated on them. Effective mobile defense involves strong passwords, multi-factor authentication, being wary of suspicious apps and links, regular updates, and paying attention to unexpected phone calls.

In addition to phishing, vishing, and other social engineering cases, devices—both Android and Apple—are also targets for malware distribution, with fake apps and system vulnerability exploitation that can compromise the device even without direct user interaction. In fact, malicious apps have been identified in the past as remaining undetected in official Google stores for a considerable amount of time. Or, towards the end of 2023, an increase in Android lending apps was noted, which were nothing more than entry points for spyware.

5. Cybersecurity is the sole responsibility of the IT sector: Every user has an essential role in protecting data and systems. Anyone who adopts good practices contributes to strengthening the security of the entire organization or online community. Simple habits such as checking links before clicking, maintaining strong and unique passwords, enabling multi-factor authentication, and reporting suspicious activity create effective barriers that complement IT technologies and policies.

The more each person acts consciously, the more resilient the digital ecosystem will be

“When we all get involved, collective awareness becomes a powerful defense, capable of preventing scams, fraud, and invasions, protecting personal and corporate information, and the digital community as a whole. The more each person acts consciously, the more resilient the digital ecosystem will be. It’s important to remember that cybersecurity is everyone’s responsibility, and small habits make a big difference,” concludes the ESET Latin America researcher.

ESET invites you to learn more about cybersecurity by visiting: https://www.welivesecurity.com/es/.

For other useful preventive information, it is also available in Venezuela: https://www.eset.com/ve/, and on its social media @eset_ve. Also available on Instagram (@esetla) and Facebook (ESET).

With information and reference images provided by ESET and Comstat Rowland

Visit our news channel on Google News and follow us to get accurate, interesting information and stay up to date with everything. You can also see our daily content on X/Twitter and Instagram

La entrada Cybersecurity myths that can put you at risk: ESET analyzes 5 common ones apareció primero en Bitfinance.