Cybercriminals Hack Brazilian Government Servers to Host Phishing Sites

Summary

A threat actor, identified as a Chinese-language group, is exploiting vulnerabilities in Brazilian government and educational servers. They are using these compromised systems to host phishing sites, primarily for gambling-related scams, creating a reverse-proxy network to obscure their activities.

Entities