A surge in financially motivated cyberattacks is targeting organizations across Latin America, especially in Mexico, using malware like AllaKore RAT, SystemBC, PureRAT, and Hijack Loader to steal credentials and enable remote access. Threat actors like Greedy Sponge use phishing and fake installers to deliver trojans that exfiltrate banking data, inject malware into legitimate processes, and bypass antivirus protections via services like Ghost Crypt. These campaigns highlight the growing threat of sophisticated infostealers and remote access malware in financially driven cybercrime.