Malicious Apache Modules Hijack Brazilian Government Site Traffic to Promote Betting Pages
Check Point Research identifies Gambling Goblin cluster targeting compromised web servers in Brazil
Key Takeaways
- Chinese-speaking cybercrime cluster Gambling Goblin targeting Brazilian government and educational web servers.
- Malicious Apache modules diverting visitor traffic to betting and gambling pages.
- Campaign tracked since mid-2025, with modules observed in September 2026.
- Exact exploitation vector and module details remain under investigation.
Related Security News
Former US Air Force Members Sentenced to Prison for Business Email Compromise Scams
Two former members of the United States Air Force were sentenced to a combined 189 months in federal prison for their roles in a multi-year series of business email compromise (BEC) scams and phishing campaigns. The sentencing, reported by BleepingComputer in September 2026, concluded a federal case targeting individuals who abused their military backgrounds to conduct financially motivated email fraud. The attacks spanned multiple years prior to sentencing, though specific victim counts and total financial losses were not detailed in the reporting. The case underscores the legal consequences of using military credentials and training for cyber-enabled fraud.
