Financial-Fraud on CuraSec

Breeze Comet Targets Brazilian Payment Systems with Fraudulent Transfers

Wed, 02 Sep 2026 15:05:08 +0000

Engineer — Skip
SOC/IR — Learn: Breeze Comet (UNC5669) is a financially motivated actor specializing in Brazilian payment and banking software manipulation; the actor profile and TTPs are useful context if your estate includes Brazilian fintech integrations, but no IOCs or detections are surfaced in this item.
Leader — Skip

Sat, 15 Aug 2026 11:32:14 +0000

Engineer — Skip
SOC/IR — Learn: The attack vector — exploiting a third-party service provider to reach bank customer accounts — is a useful case study in lateral trust abuse, but no IOCs, TTPs, or detection artifacts are available to act on.
Leader — Learn: A €30M fraud executed through a service provider flaw reinforces third-party risk as a board-level concern; useful framing for vendor risk discussions, but no specific vendor exposure to assess here.

Thu, 13 Aug 2026 11:57:16 +0000

Engineer — Skip
SOC/IR — Learn: WindRelay/SpyNote combo represents a maturing NFC relay technique worth tracking for mobile threat awareness, but no enterprise detection surface or IOCs are provided to act on.
Leader — Skip

Thu, 23 Jul 2026 12:47:45 +0000

Engineer — Learn: Breach post-mortem showing how stolen data is monetized through downstream fraud at scale, but no technical attack details or vulnerability specifics are disclosed to act on.
SOC/IR — Skip
Leader — Learn: A concrete example of stolen data translating directly into quantifiable financial loss ($13M), useful for illustrating data-breach business risk in board or audit conversations.