Netcrook
#Brazil
Leak-Site Listing Puts DXON Under Scrutiny, But the Breach Story Is Still Unproven
A public victim entry can create real pressure long before anyone confirms compromise, making naming alone a security event worth investigating.
BTMOB Turns Android Control Into a Commodity
A newly described Android RAT shows how remote device control can be packaged for low-skilled operators, with Brazil as the malware's early geographic anchor.
When an Invoice Becomes the Payload: Brazil’s NF-e Lure and the Banana RAT Trail
A routine electronic invoice can look harmless on its face, which is exactly why criminal groups keep turning trusted business paperwork into a malware delivery channel.
The Hidden Ledger of Music Fraud: How Fake Songs Turn Automation into Cash
Brazil has drawn attention to a growing streaming fraud model where invented tracks, artificial plays, and generative AI can be converted into real royalty damage.
Fake Invoices, Fake Warnings, Real Fraud: Banana RAT’s QR Trap in Brazil
A Brazil-focused malware campaign pairs invoice lures with phony security-update screens, using QR fraud to target customers at 16 banks and steal data.
When a Payment Rail Becomes a Balance-Sheet Event
Banco do Nordeste’s January cybersecurity incident shows how a problem in instant payments can later surface as a material financial hit, even when the technical root cause remains undisclosed.
AI Agents Become the New Toolsmiths in a Pair of Latin American Intrusions
Two reported campaigns in Mexico and Brazil show how agentic systems can be used to generate disposable offensive tooling, making attacks faster to iterate and harder to fingerprint.
When WhatsApp and Outlook Turn Into a Malware Relay Network
A Brazilian banking trojan tracked as REF3076 shows how attackers can turn authenticated chats and mail into a distribution channel, not just a lure.
Signed, Sealed, and Weaponized: A Brazilian Banker Tries to Borrow Trust
A new trojan campaign tied to Brazil uses a signed Logitech installer as its lure, then blends credential theft with self-spreading modules to pressure banks, fintechs, and crypto platforms.
When a Trusted Installer Turns Into a Message Relay
Reported activity around TCLBANKER shows how a banking trojan can borrow the credibility of a signed installer and the reach of hijacked accounts to spread further.
Brazilian Logistics Firm Hit as LockBit5 Ransomware Tightens Its Grip
The notorious LockBit5 gang claims a fresh victim, targeting the Brazilian transport sector in its relentless cybercrime campaign.
Brassuco.com.br Breach: Inside the Shadowy Ransomware Attack Rocking Brazil’s Online Marketplace
A notorious ransomware group claims responsibility for a major cyberattack on Brassuco.com.br, exposing sensitive data and sending shockwaves through Brazil’s e-commerce sector.
Brazil Under Siege: Killsec Ransomware Gang Strikes at the Heart of a Nation
Notorious threat actor Killsec claims responsibility for a brazen cyberattack on the Federative Republic of Brazil, signaling a new escalation in global ransomware warfare.