THREAT OPS › Threat News › Financially Motivated Threat Actor BREEZE COMET Targets Brazil
Financially Motivated Threat Actor BREEZE COMET Targets Brazil
<div class="block-paragraph_advanced"><h3><span style="vertical-align: baseline;">Introduction</span><strong style="vertical-align: baseline;"> </strong></h3> <p><span style="vertical-align: baseline;">Beginning in 2024 Mandiant investigated a string of compromises affecting Brazilian financial services, retail, and eCommerce organizations. Google Threat Intelligence Group (GTIG) tracks this activ
MITRE ATT&CK techniques
Indicators of compromise
- 3b22605244dbace8f0c07c2c599f88c4b831bb07e9998b869a5da2759d27ceecsha256
- 2214907e696bad85bde1d90c943ef66e413d7a5c6d7596ced25b74441200439asha256
- c0db6ddd6222d02ad7490399d33c61ded0076f0037409dc8498924458646d78asha256
- 6d4012e0dd3b56a3e52857734fa0d582cdf3c56f0e5decc8005c882d1d1c6cebsha256
- f139b4ca15feffb7a6633ec1a431c5c604b397576b56b5c863ae8fe4fa14db4fsha256
- 51fdd83b3737add7f3832bd0ad0b56863c0a8f7cf9bcc16fd787d1ae4b403ce6sha256
- d2aa40cc53b40c6e76ac0677c4a54387b3f27ee94c85d9b2c3a3d66aeef92a66sha256
- 447e3a131e62bd33b1297739a7b959a92358a97f58554469044636a3c4f244e8sha256
- https://cti.axur.com/bulletins/eeda3f5c-def6-4a7f-ad0c-754d5823de57url
- https://www.trendmicro.com/en_us/research/26/e/vibe-hacking-two-ai-augmented-campaigns-target-government-and-financial-sectors-in-latin-america.htmlurl
- https://blog.axur.com/en-us/axur-reveals-plump-spider-modus-operandi-systemic-pix-fraudurl
- https://procon.go.gov.br/ComprovantePDF.exeurl
- https://cmgovernadorluizrocha.ma.gov.br/Comprovantepdf.exeurl
- http://gcm.setelagoas.mg.gov.br/files/ti.zipurl
- http://gcm.setelagoas.mg.gov.br/files/notepadd.exeurl
- http://gcm.setelagoas.mg.gov.br/files/tes.exeurl
- https://minacu.go.gov.br/ComprovantePDF.exeurl
- https://conseg.ssp.go.gov.br/COAF-POLICIAFEDERAL.exeurl
- https://conseg.ssp.go.gov.br/ComprovanteBBpix.exeurl
- https://suporte.camaratunapolis.sc.gov.br/ti/attvpn.zipurl
- https://suporte.camaratunapolis.sc.gov.br/ti/1.exeurl
- https://tisup.camaratunapolis.sc.gov.br/SoftEther.exeurl
- http://suporte.ourinhos.sp.gov.br/files/s.zipurl
- http://suporte.ourinhos.sp.gov.br:443/files/s.exeurl
- http://suporte.ourinhos.sp.gov.br/files/a.exeurl
- https://servicos.salto.sp.gov.br/j.jarurl
- https://www.mrtb.gov.ng/apps/attvpn.vipurl
- http://credeb.gov.gn/r.zipurl
- https://sit.baer.gob.ve/r.exeurl
- https://jmcov.gov.py/cxv.exeurl
- dontpad.comdomain