Over 20 Brazilian Government Websites Found Distributing Malware

Researchers at ANY.RUN discovered an active campaign called PhantomEnigma that has compromised more than 20 web portals belonging to Brazilian government…

Defense teams should urgently verify whether their systems or Brazilian providers are connected to these compromised government portals. It is recommended to review access logs and downloads from Brazilian government domains, implement traffic inspection to these sites, and coordinate with providers to detect possible malware injections. Keep threat intelligence about PhantomEnigma and associated indicators of compromise up to date.