Trojanized BoostNote: analysis of the RAT used in the fake police letter campaign
On February 17, 2026, employees at Brazilian financial institutions received an official letter from the Civil Police of Amapá asking for customer records. The email came from a real address, [email protected], with a PDF attached, a protocol number, citations of constitutional articles and an electronic signature.