Banking Trojans on the Rise: What Small Businesses Should Know About Manic, Grandoreiro and ToxicPanda 2.0

Cybersecurity researchers are tracking increased activity from three banking trojans: Manic, a spyware-equipped threat; Grandoreiro, a persistent campaign hitting Latin America and Europe; and ToxicPanda 2.0, an expanded version of a previously known malware family. These threats are designed to steal banking credentials and financial information, often by tricking users into installing malicious apps or clicking deceptive links.

While these campaigns have primarily targeted regions in Latin America and Europe so far, banking trojans are a global threat that can affect any business handling online financial transactions. Small businesses are particularly attractive targets because they often have fewer security resources than large enterprises but still conduct significant online banking activity, making stolen credentials highly valuable to attackers.

Businesses should remain alert to phishing attempts, unexpected app installation prompts, and unusual banking activity, as these are common entry points for trojan infections. Keeping software updated and educating staff about these evolving threats can help reduce the risk of falling victim to credential theft.