CarnavalHeist Banking Trojan Targets Brazil with Overlay Attacks

The malware primarily targets Brazilian users, as evidenced by the use of Portuguese throughout the infection chain and the C2 infrastructure exclusively using the BrazilSouth availability zone on Microsoft Azure.