Insights on Cyber Threats Targeting Users and Enterprises in Brazil


Individuals and organizations in Brazil face a unique cyber threat landscape because it is a complex interplay of global and local threats, posing significant risks to individuals, organizations, and critical sectors of Brazilian society.

Many of the cyber espionage threat actors that are prolific in campaigns across the globe are also active in carrying out attempted intrusions into critical sectors of Brazilian society. Brazil also faces threats posed by the worldwide increase in multifaceted extortion, as ransomware and data theft continue to rise. At the same time, the threat landscape in Brazil is shaped by a domestic cybercriminal market, where threat actors coordinate to carry out account takeovers, conduct carding and fraud, deploy banking malware and facilitate other cyber threats targeting Brazilians.

Read more…
Source: Mandiant


Sign up for our Newsletter


Related:

  • Starlink’s local bank accounts are frozen as X prepares to be shut down in Brazil

    August 30, 2024

    A judge in Brazil has blocked Starlink’s bank accounts in the country amid a deepening dispute with X. The move comes as the same Supreme Court judge has threatened to shut down X in the country, and is a direct response to the ongoing legal battle with the social media company, Reuters reported. X owner Elon ...

  • X suspends business in Brazil over censorship row

    August 17, 2024

    X, formerly known as Twitter, has closed its office in Brazil over a censorship row. The social media platform said a Brazilian Supreme Court judge, Alexandre de Moraes, threatened its legal representative in Brazil with arrest if it did not comply with his “censorship orders”. Brazil’s Supreme Court has not commented. People in Brazil are still ...

  • Insights on Cyber Threats Targeting Users and Enterprises in Brazil

    July 12, 2024

    Individuals and organizations in Brazil face a unique cyber threat landscape because it is a complex interplay of global and local threats, posing significant risks to individuals, organizations, and critical sectors of Brazilian society. Many of the cyber espionage threat actors that are prolific in campaigns across the globe are also active in carrying out attempted ...

  • Mekotio Banking Trojan Threatens Financial Systems in Latin America

    July 4, 2024

    The Mekotio banking trojan is a sophisticated piece of malware that has been active since at least 2015, primarily targeting Latin American countries with the goal of stealing sensitive information — particularly banking credentials — from its targets. Originating in the Latin American region, it has been particularly prolific in Brazil, Chile, Mexico, Spain, and Peru. ...

  • New Banking Trojan “CHAVECLOAK” Targets Brazil

    March 4, 2024

    FortiGuard Labs recently uncovered a threat actor employing a malicious PDF file to propagate the banking Trojan CHAVECLOAK. This intricate attack involves the PDF downloading a ZIP file and subsequently utilizing DLL side-loading techniques to execute the final malware. Notably, CHAVECLOAK is specifically designed to target users in Brazil, aiming to steal sensitive information linked to ...

  • Coyote: A multi-stage banking Trojan abusing the Squirrel installer

    February 8, 2024

    The developers of banking Trojan malware are constantly looking for inventive ways to distribute theirs implants and infect victims. In a recent investigation, Kaspersky researchers encountered a new malware that specifically targets users of more than 60 banking institutions, mainly from Brazil. What caught their attention was the sophisticated infection chain that makes use of various ...