Chinese-language group

Brazilian Government and Education Servers Compromised in Phishing and Gambling Operation

A Chinese-language cybercriminal group has compromised Brazilian government and education servers, using them as part of a reverse-proxy network to host gambling-themed phishing sites. The operation leverages compromised infrastructure to lend credibility to scams and redirect traffic from legitimate domains.