DarkTequila
- First seen
- 2013-08-01 00:00:00
- Malware type
- credential-stealer, keylogger, spyware
- Family
- Malware family
- Profile updated
- 2026-07-07 14:56:50
Targeted industries: financial-services technology-and-telecommunications
Targeted regions: country_code:mx
Context
Dark Tequila is a complex malicious campaign targeting Mexican users, with the primary purpose of stealing financial information, as well as login credentials to popular websites that range from code versioning repositories to public file storage accounts and domain registrars.
Detection coverage
- 1 YARA rules
Detection rules
- MALPEDIA_Win_Darktequila_Auto (yara-rule)
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Win.Darktequila (report)
- Kaspersky — 87528 (report)