#coyote

#coyote

The campaign involves two components: A self-propagating malware referred to as SORVEPOTEL that's spread via the desktop web version of WhatsApp and is used to deliver a ZIP archive containing the Maverick payload. The malware is designed to monitor active browser window tabs for URLs that match a hard-coded list of financial institutions in Latin America. Should the URLs match, it establishes contact with a remote server to fetch follow-on commands to gather system information and serve phishing pages to steal credentials.

"It's kind of crazy," said Joseph Soriano of Mill Valley.

L.A. County Sheriff's Deputy Andrew Garza noted the surprising sight of a coyote and bear together, as they appeared to have lost their natural habitat due to recent fires.