A “Brazillian” Different Kinds of Malware and Why Your Organization Should Care

Abstract:

In this presentation I will discuss the basic process for real threat actor attribution and how this process was used to identify a new financially motivated threat actor group targeting Portuguese and Spanish speaking victims with many interesting malware and phishing operations. Many organizations based in North America and Europe would not consider this
group a threat; however, global supply chains make this threat actor group a worldwide menace.

Many organizations fail to take into account how threats outside their home country or region can affect their operations. I intend to show how a seemingly insignificant threat actor operation primarily targeting Mexico and South America has global ripple effects and why it is important to look at similar threats to an organization’s entire supply chain.