Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
Hackers Use AI Malware to Break Into Brazilian Banks and Make Fraudulent Transfers
Threat Actors
Excerpt
Brazilian financial organizations are facing a growing threat from a cybercrime group tracked as BREEZE COMET. Since 2024, Mandiant has investigated attacks against financial services, retail, and eCommerce companies in Brazil. The group is financially motivated and focuses on breaking into systems that can process payments. BREEZE COMET, previously known as UNC5669, is linked to activity reported as Plump Spider and SHADOW-AETHER-064. Its goal is not ordinary banking fraud…
Read the original report →Diamond Model
Adversary(1)
Infrastructure
Capability
Victim
Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | 2214907e696bad85bde1d90c943ef66e413d7a5c6d7596ced25b74441200439a | Medium | Score 55/100 | First seen |
| SHA256 | 3b22605244dbace8f0c07c2c599f88c4b831bb07e9998b869a5da2759d27ceec | High | Score 85/100 | First seen |
IOC Relationship Graph
Building graph…