
- Banking trojan Coyote now abuses Microsoft’s UI Automation framework
- The framework allows it to spot when a person opens a banking site
- It can cross-reference the data in the browser with a hardcoded list of banking and crypto apps
Coyote, a known banking trojan malware capable of attacking dozens of crypto and banking apps, has been upgraded to identify crypto exchanges and bank accounts opened in the web browser, experts have warned.