Threat Intelligence / Actor / SHADOW-WATER-063

SHADOW-WATER-063

Nation: Brazil · 1 tracked threat(s) · Categories: MALWARE

Also known as: Projeto Banana, Banana RAT operators

Tracked threats

SHADOW-WATER-063 Banana RAT — Brazilian Banking Trojan with FastAPI Polymorphism Panel, AES-256-CBC PowerShell Payloads, Fileless In-Memory C# Compilation, and PIX QR Code Interception — HIGH

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence