Executive Summary

The article reports a new malware infection, Guildma (also known as Astaroth), delivered via a phishing email in Brazilian Portuguese. The email contained a malicious attachment that, when opened, installed the malware on the victim’s system. Guildma is designed to steal credentials, exfiltrate data, and establish persistence on infected machines. The report highlights the email’s social‑engineering tactics and the malware’s capabilities, urging users to verify sender authenticity and keep security software updated.

---

Intelligence Metadata - Source Publisher: SANS Internet Storm Center - Published Date: 2026-09-01T00:33:21+00:00 - Category: threat-intel

Original Description: Introduction

"When anger use your energy to do something productive."

— C. Pulsifer