FGC detects unauthorized access to personal and payout data
No evidence of disclosure or misuse; investigation ongoing with ANPD notified.
Stories per day · 30 days
3 RSS
Relateddata-breach2ecommerce2elections2magecart2plausible2social-media2ai-generated1banking1card-skimming1content-moderation1convertr1cryptocurrency-exchange1crypto-transfer1deepfake1fgc1generative-ai1gpt1itau1
29 stories, newest first · one card per story
Stories tagged #brazil
Mercado Bitcoin suffers cyberattack, researchers flag $40M suspicious transfers
Researchers flagged more than $40 million in suspicious transfers from the Brazilian crypto exchange across 10 blockchains.
1
Brazilian Court Fines Lawyers for Prompt Injection in AI Filing
Brazilian labor court fined two lawyers for embedding a hidden prompt-injection command to manipulate the Galileu AI review system.
1
Attackers hijack Convertr analytics script to skim checkout card data
Sansec says a Brazilian gang altered Convertr’s Plausible tracker; the skimmer was later removed and Plausible upgraded to a patched version.
Magecart skimmer hits Convertr checkouts through Plausible tracker
Sansec says the tracker was still serving the skimmer on October 26 and that card data plus CPF was posted to 1x0.is.
3
Man travels 2,000 km in Brazil to meet an AI-generated woman
He sold belongings to fund the bus trip; police have not established that a crime occurred.
1
How Itaú is building generative AI for its entire customer base
Itaú uses OpenAI models in ia.i and IARA to deliver generative AI banking for about 70 million Brazilian customers.
Hunt.io Finds New Infrastructure Of BraZetsu Access Broker Months Before Disclosure
Hunt.io says BraZetsu access-broker infrastructure kept stable TLS and hosting patterns months before public IOCs.
2
Hackers Exploit GlobalProtect Flaw and Turn Stolen Data Into 2.4 Million Fraud Messages
Criminals exploited a GlobalProtect bypass, stole customer records, and sent 2.4 million fake bills.
5
Do Electromagnetic Side-Channel Attacks Threaten Electronic Polling Stations? Scenarios and Recommendations
Researchers assess TEMPEST attacks on Brazil's electronic voting machines and recommend polling-station mitigations.
Malware bypasses browser checks to force install Chrome, Edge extensions
Elastic Security Labs detailed KREMLIN, a Brazilian banking malware that silently installs malicious Chrome and Edge extensions, with 1,515 confirmed infections.
3
KREMLIN Banking Malware Infects Over 1,500 Systems With Malicious Chrome Extension
Elastic tracks KREMLIN banking malware that used fake Brazilian bank JavaScript lures to deploy malicious Chrome and Edge extensions on 1,515 systems.
1
KREMLIN Banking Malware Bypasses Chrome Security to Steal Banking Sessions
Elastic Security Labs details KREMLIN, a Brazilian banking malware that implants malicious Chrome and Edge extensions by forging Chromium integrity values to steal banking sessions.
1
KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens
Elastic Security Labs details KREMLIN, Brazilian banking malware using malicious Chrome/Edge extensions and Ethereum smart contracts to steal credentials and session tokens.
2
The extension you never installed: KREMLIN forges Chrome's own integrity checks to steal banking sessions
Elastic details KREMLIN, a Brazilian banking malware whose malicious Chrome/Edge extension forges Chromium integrity checks to steal sessions.
2
Cybercriminals Hack Brazilian Government Servers to Host Phishing Sites
A Chinese-language cybercriminal group is compromising Brazilian government and education servers to host gambling-themed phishing sites via a reverse-proxy network.
1
Breeze Comet Executes Hundreds of Fraudulent Transactions via Brazilian Payment Systems
Google/Mandiant profile Breeze Comet, a Brazil-based e-crime group executing fraudulent Pix and STR payment transactions at banks, retailers, and fintechs.
2
412,000 The Town 2025 Ticket Buyers’ Data Hits the Dark Web
A forum seller is offering 412,192 The Town 2025 ticket buyer records, mostly Brazilian with CPF numbers, marketed for bank fraud, loans and SIM registration.
'Breeze Comet' Tears Into Brazilian & Global Financial Systems
Threat group 'Breeze Comet' is attacking Brazil's financial systems and reportedly stealing funds directly, per Dark Reading threat intelligence.
Gambling Goblin Turns Brazilian Government Sites Into SEO Weapons
Check Point links Chinese-speaking cluster Gambling Goblin to SEO-fraud compromises of Brazilian government sites via malicious Apache modules since mid-2025.
Malicious Apache Modules Hijack Brazilian Government Site Traffic to Push Betting Pages
Check Point links Gambling Goblin, a Chinese-speaking cluster, to malicious Apache modules hijacking Brazilian government servers to promote betting sites.
Gaming the system: how a Chinese-speaking actor turned Brazilian government sites into an SEO weapon
Check Point identifies Chinese-speaking group Gambling Goblin hijacking Brazilian government domains via malicious Apache modules for SEO-manipulated gambling phishing.
Guildma (Astaroth) malware infection from Brazilian Portuguese email, (Tue, Sep 1st)
Guildma (Astaroth) malware spread via geofenced Brazilian Portuguese phishing emails, using zip archives, shortcuts, and AutoIt loaders.
Financially Motivated Threat Actor BREEZE COMET Targets Brazil
Google Threat Intelligence details BREEZE COMET, a financially motivated group manipulating Brazilian payment systems and banking software to conduct fraudulent transfers since 2024.
1