Financially Motivated Threat Actor BREEZE COMET Targets Brazil

BREEZE COMET is a financially motivated threat actor targeting Brazilian banks, payment processors, and fintech companies since 2024 to conduct fraudulent transfers through banking systems and payment APIs (interfaces that let software communicate with payment services). The group uses custom malware, compromised government websites for initial access and command and control (C2, the attacker's remote communication channel with infected systems), and generative AI to develop attacks, with recent activity suggesting expansion into other Latin American and African countries.