National Financial System Network (RSFN)

Breeze Comet talks its way into Brazilian payment systems with a help-desk call and AnyDesk

Google Threat Intelligence and Mandiant put the Brazilian crew's route to Pix and STR at password spraying plus a fake IT support call, which means the controls that bite here are RMM allow-listing and out-of-band verification of the help desk.