Researchers have discovered a novel banking Trojan they dubbed “Coyote,” which is hunting for credentials for 61 different online banking applications.

“Coyote,” detailed by Kaspersky in an analysis today, is notable both for its broad targeting of banking-sector apps (the majority, for now, in Brazil), and its sophisticated interweaving of different rudimentary and advanced components: a relatively new open source installer called Squirrel; NodeJs; an unsung programming language called “Nim”; and more than a dozen malicious functionalities. In all, it represents a notable evolution in Brazil’s thriving market for financial malware — and could spell big trouble down the line for security teams if it expands its focus.