← Back to Feed
Inside SHADOW-WATER-063’s Banana RAT: From Build Server to Banking Fraud
May 19, 2026 · Trend Micro · Severity: HIGH
In this blog entry, researchers from the TrendAI™ MDR team discuss how they mapped the full end-to-end operation of SHADOW-WATER-063’s Banana RAT banking malware by analyzing server-side artifacts and victim-side data.
Key Takeaways
- The TrendAI MDR team mapped the full end-to-end operation of SHADOW-WATER-063's Banana RAT banking malware.
- The analysis examined both server-side artifacts and victim-side data for complete visibility.
- Banana RAT is a banking malware used for financial fraud operations.