The Grandoreiro malware has resurfaced in Mexico, accounting for 40% of its recent detections following a disruption in 2024. This malware primarily employs DLL sideloading techniques, which allow it to execute malicious code by leveraging legitimate software. Researchers indicate that this recent activity underscores a renewed focus on targeting users in Mexico, raising concerns among individuals and organizations alike. The resurgence of Grandoreiro poses significant risks, especially as it may lead to data theft and unauthorized access to sensitive information. Users and companies operating in Mexico should be vigilant and consider enhancing their security measures to defend against this threat.