'Breeze Comet' Tears Into Brazilian & Global Financial Systems
Sophisticated threat group 'Breeze Comet' targets Brazilian and global financial systems.
Summary
Brazil's most advanced threat group, known as Breeze Comet, has been actively targeting financial systems both within Brazil and globally. The group's primary objective appears to be financial gain, as they are successfully siphoning funds directly into their own accounts. This sophisticated operation highlights the growing threat posed by nation-state-backed or highly organized cybercriminal groups to the financial sector.
The lesson from this incident
Full lessonBreeze Comet represents a highly organized, financially motivated threat actor actively compromising banking and financial infrastructure in Brazil and globally, redirecting funds directly into attacker-controlled accounts. The sophistication of this group suggests they are exploiting weak access controls, insufficient transaction monitoring, and potentially undetected persistence within financial networks over extended periods. Financial institutions that lack real-time anomaly detection on transactional systems are particularly vulnerable to fund exfiltration that may go unnoticed until significant damage is done. This incident underscores that nation-state-level or organized criminal groups specifically target the financial sector because the direct path to monetary gain is shorter and harder to reverse once funds are moved.
What helps against this
How we list vendors- Identity threat detection and response (ITDR)
Attackers who log in with real, stolen credentials get noticed.
- Managed detection and response (MDR)
A team watches and responds around the clock when you cannot.
- Network detection and response (NDR)
Attackers moving between systems inside the network get seen.