Threat Intelligence / Actor / JanelaRAT Operators (LATAM Portuguese-speaking cluster)

JanelaRAT Operators (LATAM Portuguese-speaking cluster)

Nation: Brazil (suspected) · 1 tracked threat(s) · Categories: MALWARE

Also known as: Janela Actors, Operation Janela, Guildma-linked cluster

Tracked threats

JanelaRAT 2026 Campaign: Updated Brazilian Banking Trojan Targeting Latin American Financial Sector via DLL Side-Loading — HIGH

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence