Coyote Banking Trojan targets Brazilian users, stealing data from over 70 financial applications and websites.Threat actors use LNK files and PowerShell commands to deploy the Coyote Banking Trojan.The Trojan supports keylogging, capturing screenshots, and displaying phishing overlays.The malware expands its targets to include 1,030 sites and 73 financial agents, posing a significant threat.