New Coyote Malware Variant Exploits Windows UI Automation to Steal Banking Credentials

Jul 23, 2025

The Windows banking trojan known as Coyote has become the first known malware strain to exploit the Windows accessibility framework called UI Automation (UIA) to harvest sensitive information.
“The new Coyote variant is targeting Brazilian users, and uses UIA to extract credentials linked to 75 banking institutes’ web addresses and cryptocurrency exchanges,” Akamai security researcher Tomer

Get Free Report & Network Analysis

Please check your email for the free report.