Record · corpus.blog/posts/01a0ca88-8605-700d-965d-b76005342222

The SOC Files: Time to “Sapecar”. Unpacking a new Horabot campaign in Mexico

Kaspersky Securelist · published 18 March 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at securelist.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 54
Words captured: 3,556

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://blog.talosintelligence.com/new-horabot-targets-americas/

blog.talosintelligence.com

https://www.fortinet.com/blog/threat-research/horabot-unleashed-a-stealthy-phishing-threat

fortinet.com

https://encyclopedia.kaspersky.com/knowledge/heuristic-and-proactive-detections/

encyclopedia.kaspersky.com

https://urlscan.io/result/0198e675-6c09-72d8-81fc-c5c33df16dc1/dom/

urlscan.io

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2026/02/24133444/horabot-campaign1.png

media.kasperskycontenthub.com

Lumma Stealer – Tracking distribution channels Read at the source ↗

securelist.com

Lumma/Amadey: fake CAPTCHAs want to know if you’re human Read at the source ↗

securelist.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2026/02/24133620/horabot-campaign2.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2026/02/24133826/horabot-campaign3.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2026/02/24133904/horabot-campaign4.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2026/02/24134018/horabot-campaign5.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2026/02/24181742/horabot-campaign6.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2026/02/24181926/horabot-campaign7.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2026/02/24182009/horabot-campaign8.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2026/02/24182059/horabot-campaign9.png

media.kasperskycontenthub.com

https://www.welivesecurity.com/2019/10/03/casbaneiro-trojan-dangerous-cooking/

welivesecurity.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2026/02/24182241/horabot-campaign10.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2026/02/24182319/horabot-campaign11.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2026/02/24182414/horabot-campaign12.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2026/02/24182537/horabot-campaign13.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2026/02/24182634/horabot-campaign14.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2026/02/24182723/horabot-campaign15.png

media.kasperskycontenthub.com

https://github.com/abalad/Delphi_Remote_Access_PC

github.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2026/02/24183109/horabot-campaign16.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2026/02/24183232/horabot-campaign17.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2026/02/24183501/horabot-campaign18.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2026/02/24183552/horabot-campaign19.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2026/02/24183645/horabot-campaign20.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2026/02/24183724/horabot-campaign21.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2026/02/24183804/horabot-campaign22.png

media.kasperskycontenthub.com

https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_variables?view=powershell-7.5

learn.microsoft.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2026/02/24183853/horabot-campaign23.png

media.kasperskycontenthub.com

https://opentip.kaspersky.com/https%3a%2f%2fevs.grupotuis.buzz%2f0capcha17%2f/?icid=gl_sl_opentip-lnk_sm-team_7f3de73612a1bb01&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/https%3a%2f%2fevs.grupotuis.buzz%2f0capcha17%2fdmeenliggb.hta/?icid=gl_sl_opentip-lnk_sm-team_1115cd4c3741e3d6&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/https%3a%2f%2fevs.grupotuis.buzz%2f0capcha17%2fdmeenliggb%2fgrxuoiwcekvx/?icid=gl_sl_opentip-lnk_sm-team_bc9a407ac3a05e94&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/https%3a%2f%2fpdj.gruposhac.lat%2fg1%2fld1%2f/?icid=gl_sl_opentip-lnk_sm-team_4e2e5b17eedb516c&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/https%3a%2f%2fpdj.gruposhac.lat%2fg1%2fauxld1/?icid=gl_sl_opentip-lnk_sm-team_ece2e73e27b67cc7&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/https%3a%2f%2fpdj.gruposhac.lat%2fg1%2f/?icid=gl_sl_opentip-lnk_sm-team_c2bd63ddb312116f&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/https%3a%2f%2fpdj.gruposhac.lat%2fg1%2fctld%2f/?icid=gl_sl_opentip-lnk_sm-team_5a892adced07870b&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/https%3a%2f%2fpdj.gruposhac.lat%2fg1%2fgerador.php/?icid=gl_sl_opentip-lnk_sm-team_0430b45b28db5960&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/https%3a%2f%2fcgf.facturastbs.shop%2f0725%2fa%2fhome/?icid=gl_sl_opentip-lnk_sm-team_f0769bfa4cf4695b&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/https%3a%2f%2fcfg.brasilinst.site%2fa%2fbr%2flogs%2findex.php%3fchlg/?icid=gl_sl_opentip-lnk_sm-team_f6fa3c8fadaba9cf&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/https%3a%2f%2faufal.filevexcasv.buzz%2fon7%2findex15.php/?icid=gl_sl_opentip-lnk_sm-team_3b0055da9552d6da&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/https%3a%2f%2faufal.filevexcasv.buzz%2fon7all%2findex15.php/?icid=gl_sl_opentip-lnk_sm-team_2348a72e174524e8&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/https%3a%2f%2fcgf.facturastbs.shop%2fa%2f08%2f150822%2fau%2fat.html/?icid=gl_sl_opentip-lnk_sm-team_d67569afd04fd252&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/https%3a%2f%2flabodeguitaup.space%2fa%2f08%2f150822%2fau%2fau/?icid=gl_sl_opentip-lnk_sm-team_043927488367685e&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/https%3a%2f%2fcgf.midasx.site%2fa%2f08%2f150822%2fau%2fau/?icid=gl_sl_opentip-lnk_sm-team_8de95855deff98f7&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/https%3a%2f%2fcgf.facturastbs.shop%2fa%2f08%2f150822%2fau%2fgerauto.php/?icid=gl_sl_opentip-lnk_sm-team_b6fe798f14720025&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/https%3a%2f%2fcgf.facturastbs.shop%2fa%2f08%2f150822%2fau%2fapp/?icid=gl_sl_opentip-lnk_sm-team_8b3cde463095a932&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/https%3a%2f%2fcgf.facturastbs.shop%2fa%2f08%2f150822%2fau%2fgerapdf%2fblqs1/?icid=gl_sl_opentip-lnk_sm-team_6658181616e9d681&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/https%3a%2f%2fthea.gruposhac.space%2f0out0408/?icid=gl_sl_opentip-lnk_sm-team_5bae60f2791fba2d&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/6272ef6ac1de8fb4bdd4a760be7ba5ed/?icid=gl_sl_opentip-lnk_sm-team_c6ead739add492c9&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/lifenews.pro/?icid=gl_sl_opentip-lnk_sm-team_034075e07a90d32d&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/64.177.80.44/?icid=gl_sl_opentip-lnk_sm-team_1a4053398dec8ed5&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com