An analysis based on the latest ESET Threat Reports reveals critical changes in the infostealer ecosystem: Although global detections decreased by 18% in the second half of 2025, attacks are now more sophisticated.

The use of artificial intelligence and new distribution models are redefining risk for businesses and citizens throughout Latin America. “Infostealers remain a favorite tool of cybercriminals because they allow them to steal large volumes of credentials and sensitive information silently. Although we saw a decrease in the number of detections last year, we also observed an evolution in their sophistication, with better-targeted campaigns and the use of new technologies to optimize attacks,” says David González, Cybersecurity Specialist at ESET Latin America.

Researchers at this company, a global leader in cybersecurity, analyzed the evolution of malware, specifically this type designed to steal sensitive information such as passwords, banking data, and browser history. With the discontinuation of Agent Tesla, other families like Formbook and SnakeStealer have taken the lead in information theft.

This information is of relevant interest to both experts and advanced users, as well as those with basic knowledge who are undergoing preventative education and training.

Local radar alert: the threats setting the trend in our region

According to ESET telemetry, these are the malware families with the greatest impact that users in Latin America should closely monitor:

– Formbook (Win/Formbook). This was the most identified family globally at the end of 2025, accounting for 17.3% of total detections, primarily distributed through phishing campaigns.

– Lumma Stealer (Win/Spy.LummaStealer). Responsible for massive attacks, especially targeting users in Mexico, focused on stealing credentials and data stored in browsers.

– Agent Tesla (MSIL/Spy.AgentTesla). Despite a slowdown in its development, it continues to be widely distributed through malware downloaders such as CloudEyE (GuLoader).

– NGate / PhantomCard (Android/Spy.NGate). A mobile spyware threat primarily targeting the Brazilian banking ecosystem, with the ability to steal contacts and card data.

– Spy.Banker_(JS/Spy.Banker). JavaScript-based Trojans that mainly affect users of financial services and have a global detection rate of approximately 9.5%.

How are these threats distributed to carry out attacks?

The main infection vectors include: Phishing and targeted spam, with malicious attachments that simulate invoices or orders. ClickFix, a social engineering technique that displays fake system errors or prompts users to activate software to make it fully functional or unlock new features in the paid version; in both cases, the goal is to convince the user to execute malicious commands. Malware downloaders, such as CloudEyE (GuLoader), which experienced strong growth during the second half of 2025. Fraudulent websites that impersonate official stores like Google Play to distribute applications.

Digital Survival Guide: What You Need to Know to Protect Your Information Today

Latin America has become a key target for cybercriminals. Don’t ignore these recommendations; they are essential tools to avoid becoming the next victim.

• Strengthen your credentials: It is vital to improve the protection of your passwords and use early threat detection methods.
• Beware of “ClickFix”: Don’t fall for fake system errors that prompt you to run malicious commands to “activate” software.
• Mobile security: Strengthen security in mobile environments and be extremely cautious with payment technologies like NFC, which are increasingly used in financial attacks.
• Verify your downloads: Avoid websites that impersonate official stores like Google Play, as they are common vectors for distributing fraudulent applications.

ESET invites you to learn more about cybersecurity by visiting: https://www.welivesecurity.com/es/.

For other useful preventative information, also available in Venezuela:  https://www.eset.com/ve/, and on their social media channels @eset_ve. Also on Instagram  (@esetla) and Facebook (ESET).

With information and reference image provided by ESET and Comstat Rowland

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada What’s happening with infostealers and credential theft? Is your digital identity at risk? apareció primero en Bitfinance.

Spain and Germany announced an agreement to initiate the pilot test to analyze the viability of a “decentralized and cross-border digital identity ecosystem based on the principles of self-sufficient identity“, which will contribute to the creation of the European Digital Identity.

The Secretaries of State for Digitization of Germany, Dorothee Bär and of Spain, Carme Artigas, reported, in a digital meeting with journalists, that the idea is that other countries of the community join the agreement and both officials are taking steps to achieve this. target.

The agreement contemplates the formation of a joint work team that will be in charge of analyzing the technical, regulatory and operational challenges of the project, in addition to presenting the results and progress made regularly.

The specific cases that could be used in the pilot test have not yet been identified. But some examples would be the completion of procedures to make reservations in a hotel, the certification or confirmation of having a valid driver’s license when renting a car or to open a bank account.

Data security

Germany and Spain share the same vision on digital identity, so they have managed to sign the agreement: According to Bar: “Spain is leading the development of sovereign and decentralized identification systems”.

Artigas stressed that “the collaboration that we are initiating today with Germany towards a digital identity is an essential step on the European path towards data sovereignty. People must have the power of their data and their identity.”

The purpose of the European Community to create a Common European Identity will allow citizens to safely share their own identity data without losing control over it.

The European Union has been working on the creation of a “kind of Community digital wallet”. That is a virtual card which allows citizens to carry out online operations that currently require the introduction of a DNI or other official document. This wallet would facilitate management in the public and private sectors and should be operational by September 2022, according to estimates from Brussels.

M. Rodríguez

Source: elpais.com

La entrada Spain and Germany will create a common digital identity system apareció primero en Bitfinance.

The European Union (EU) is working on an efficient digital wallet that will allow citizens to store official documents such as ID or driver’s license, manage passwords and make secure payments using their digital identification.

The EU will present this week the details of the application that will be available for the 27 member countries in 2022. With this official solution, citizens will be able to operate safely on local government web pages as well as other Internet sites.

The EU digital wallet will have various biometric authentication methods. Citizens will be able to validate their identity through their fingerprints, retinal scanning and other methods that have not been specified.

In this sense, the block of 27 will be strict in terms of the data that can be accessed by companies or entities with which the digital wallet is used. Those interested in following up on this new application can follow the @DigitalEU account on Twitter, as well as the hashtags #DigitalEU and #EUdigitalidentity.

📢 63% of EU citizens want a secure single digital ID for all online services.

With our #EUdigitalidentity wallet, you will be able to connect through #DigitalEU services and authenticate much easier.

Thread on our proposal for a European Digital Identity ↓

— European Commission 🇪🇺 (@EU_Commission) June 3, 2021

M.Pino

Source: doblellave

La entrada European Union will launch a digital wallet apareció primero en Bitfinance.