Financially Motivated Threat Actor BREEZE COMET Targets Brazil

Google Threat IntelligenceSeptember 1, 2026Threat Intel

Introduction Beginning in 2024 Mandiant investigated a string of compromises affecting Brazilian financial services, retail, and eCommerce organizations. Google Threat Intelligence Group (GTIG) tracks this activity as BREEZE COMET (formerly UNC5669), a financially motivated threat actor specializing in manipulating payment systems and banking software in Brazil to conduct fraudulent transfers.

Summary from Google Threat Intelligence.

Read the full article at Google Threat Intelligence

Explained

The technology and terms in this story. Learn more

ConceptCommand and control · C2The servers attackers use to send instructions to their malware and receive stolen data.

Financially Motivated Threat Actor BREEZE COMET Targets Brazil

Explained

More in Threat Intel

Synthetic identities leave US lenders with $2.4 billion in fraud exposure

Sponsored: Should your threat hunt become a detection?

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 120

BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot

Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a Botnet