Threat IntelligenceJun 4, 2026
🚨🇪🇸 A threat actor known as jordanbelfortwolf is selling access to a bot offering banking lead...
Threat actor jordanbelfortwolf selling bot access to banking leads from major Spanish banks.
Summary
A threat actor operating under the handle jordanbelfortwolf is offering access to a malicious bot that harvests banking leads from major Spanish financial institutions including CaixaBank, Banco Santander, BBVA, Banco Sabadell, ING, and Bankinter. The actor claims to have compromised over 30 million unique customer records. This represents a significant threat to Spanish banking sector customers and financial institutions.
Indicators of Compromise
- malware — banking lead harvesting bot
Entities
jordanbelfortwolf (threat_actor)CaixaBank (vendor)Banco Santander (vendor)BBVA (vendor)Banco Sabadell (vendor)banking lead harvesting bot (technology)