Malware leads detections in Latin America. Amatera, a designed to steal confidential information infostealer, headed malware detections in Latin America during the first half of 2026, according to ESET data. The threat can steal passwords, bank data, navigation sessions, and corporate credentials, exposing both individual users and companies to frauds and unauthorized access.
What is Amatera?
Amatera is a Windows infostealer written in C++ that was first observed in 2024. It is distributed under a Malware as a Service (MaaS) model, in which its developers maintain the code, panel, and support infrastructure, while clients or affiliates pay for a subscription to use it in their own campaigns. According to various security companies, Amatera is a rebrand of ACR Stealer.
How is Amatera distributed?
According to ESET data, during the first half of 2025, ClickFix detections grew by 517% compared to the previous semester. The trend continued during the first half of 2026, when detections increased by 108% compared to the second half of 2025. Another method used to distribute Amatera is through Google ads.
Amatera in Latin America
In Latin America, ESET data for the first half of 2026 shows that Amatera (Win/PSW.Amatera) is the infostealer with the highest volume of detections, above other families such as Formbook, Vidar, Snakestealer, Lummastealer, or Rhadamanthys. “Amatera is an example of how the infostealer market works: its developers maintain the code, panel, and support infrastructure, while clients or affiliates pay a subscription to use the malware in their own campaigns”, explains Mario Micucci, security researcher at ESET Latin America.
Credits: deultimominuto.com
Note generated automatically from the sources cited in the text. Found an error? Email us at [email protected] and we'll fix it.
