The Metamorfo Trojan has been revamped to evade antivirus and other security protections. The Trojan has targeted banks and other financial institutions in Brazil. The threat actors have adapted to the changing situations by creating different campaigns that have the same goal of stealing money but use differing ways to get there. Preventative actions such as AV tools using static string analysis developed for the initial campaign will not work against the second wave since the methods and files used in them have changed. The second wave is a remote administration tool with the capability to create emails.”]