Breeze Comet Executes Hundreds of Fraudulent Transactions via Brazilian Payment Systems

The threat actor Breeze Comet has been targeting Brazilian financial and retail organizations since 2024, using tactics like password spraying and social engineering to install remote access tools and deploy malware. They manipulate payment systems such as Pix and Boleto to conduct fraudulent transactions worth tens of thousands of dollars. Breeze Comet's operations may expand to other Latin American and African countries.