The cybersecurity landscape has seen groundbreaking developments with the discovery of Coyote. The first known malware to exploit the Windows UI Automation framework to steal sensitive banking and cryptocurrency credentials, primarily targeting Brazilian users. By manipulating legitimate assistive technology features, Coyote enhances its ability to bypass defenses, capturing login details through sophisticated parsing of UI elements. Concurrently, Mexican organizations remain under persistent threat from Greedy Sponge. A financially motivated group deploying modified RATs like AllaKore and SystemBC via phishing and drive-by downloads. Recent updates incorporating refined geofencing to evade detection. The threat actors are also leveraging advanced crypters like Ghost Crypt and evolving RAT variants such as Neptune RAT. Employing encrypted payloads and JavaScript lures to maintain regional prominence. These developments underscore the escalating sophistication and adaptability of cybercriminal campaigns, highlighting the urgent need for heightened cybersecurity vigilance across targeted sectors. CTIX analysts will continue to report on the latest malware strains and attack methodologies.