New Malware Builder Targets 700+ Banks Across the Globe, Allows Thieves To Steal Credentials and Take Over Accounts: Report

A new malware-as-a-service threat is targeting hundreds of banks around the world by giving cybercriminals tools to steal credentials and take over accounts.

According to a new advisory from the cybersecurity firm iZOO Logic, the threat was identified as a Telegram-based advertisement for a malware builder known as BankGhost Builder.

iZOO Logic says BankGhost Builder is advertised as a fully featured malware builder that enables bad actors to create and deploy banking malware. The tool claims support for more than 700 banks, including institutions across India, North America, Europe and the Asia-Pacific region.

The advisory says the malware builder offers end-to-end attack capabilities, combining payload generation, phishing infrastructure and credential theft features into a single criminal service.

The platform is marketed as a malware-as-a-service tool, a model that allows threat actors to rent or buy access to ready-made malware capabilities.

According to iZOO Logic, BankGhost Builder is designed to help attackers target global banking ecosystems and increase the scale of credential theft, fraud and account takeover attempts. The firm says the threat shows how cybercriminal tools are being packaged and advertised to make banking attacks easier to launch.

The company says financial institutions should monitor for suspicious infrastructure, credential harvesting activity and phishing campaigns tied to emerging banking malware tools.

iZOO Logic also says the appearance of BankGhost Builder reflects the continued use of malware-as-a-service offerings against banks and their customers.

Generated Image: Midjourney