BREEZE Comet, a sophisticated cybercrime group in Brazil, is exploiting the country's financial systems to enact fraudulent transactions. This group targets a variety of organizations, including banks and fintech companies, using advanced techniques such as custom malware and social engineering. Their methods include recruiting insiders and directly connecting malicious devices to corporate networks. The group can execute large-scale illegal transactions by understanding local payment systems like Pix.
Experts warn that their approaches could be replicated globally, posing a significant threat both in and outside of Brazil. Furthermore, Breeze Comet utilizes generative AI to enhance their operations, making them a formidable adversary in the evolving landscape of cybercrime.