Breeze Comet did not phish bank customers. It got inside Pix, STR and Boleto and pushed hundreds of transactions
2026-09-04Security
Google's threat group documented a Brazilian crew that needs RSFN network access and mTLS credentials to operate — the requirements of a payments engineer, not a fraudster. The way in was a WhatsApp message impersonating IT support and a remote-access tool.