AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH
ÆAETERNAERESEARCH
Sign inRequest access
← Malware catalog

Attributed metadata history

REFERENCEPUBLIC METADATA

Metamorfo - S0455

Name of ATT&CK software | [Metamorfo](https://attack.mitre.org/software/S0455) is a Latin-American banking trojan operated by a Brazilian cybercrime group that has been active since at least April 2018. The group focuses on targeting banks and cryptocurrency services in Brazil and Mexico.(Citation: Medium Metamorfo Apr 2020)(Citation: ESET Casbaneiro Oct 2019)

Reference details

Primary displayed family label
Metamorfo - S0455
Source category
Malware intelligence
Source context
2024/02/google-cloud-run-abuse.json
First reported
Feb 20, 2024 12:32 UTC
Last reported
Feb 20, 2024 12:32 UTC
Catalog updated
Oct 08, 2026 05:54 UTC
Record ID
5ae06b4db1a21d41d9ed865b36b8178686a1b51e7eafdf2733ddccd3fae4bfef

Source family labels

Metamorfo - S0455

Tags

misp:galaxy-name="Malware"misp:galaxy-type="mitre-malware"misp-galaxy:mitre-malware="Metamorfo - S0455"

Published indicators

Network indicators are visibly defanged. This page does not make them clickable or send them to another service.

No validated file hashes or network indicators are stored for this record.

Source observations

talos_ioc

Source-provided label
Metamorfo - S0455
Evidence class
provider reported
Confidence
Not reported
Observed
Feb 20, 2024 12:32 UTC
Retrieved
Oct 08, 2026 05:54 UTC

Research references

This record contains metadata and attribution only. It does not host, download, unpack, render, or execute malware samples.

Feed collection status

Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.

1 sources: 0 stale, 0 needing attention, 1 paused, 0 unverified.

Review source update dates and status
  • talos_iocCollection pausedLast successful batch: Unverified

Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.