negativeSYS.SOURCE: The Hacker News• 2026-09-08T21:50:23+05:30

Slim Spider Cyberattack Targets Brazilian Financial Institution's Crypto Custody Secrets

#cybercrime #credential theft #crypto theft #cloud security #financial fraud

Slim Spider, a financially motivated threat actor, infiltrated a Brazilian financial institution's cloud environment to steal cryptocurrency custody secrets using custom scripts and cloud credentials. The attack involved exploiting cloud-native cryptographic tools and targeting critical financial infrastructure like Pix payments and Ethereum wallets.

A previously undocumented financially motivated threat actor has been linked to attacks targeting Brazilian financial institutions since at least March 2026.

Cybersecurity company CrowdStrike is tracking the Brazil-based activity cluster under the name Slim Spider.

"The adversary demonstrates deep operational knowledge of Brazilian financial infrastructure, including the instant payment

Read original article

*** END OF TRANSMISSION ***

> CISA ADDS CRITICAL VULNERABILITIES IN COLLABORA ONLINE AND ARISTA VELOCLOUD TO KEV LIST > SAMSUNG TV REVERSE ENGINEERING REVEALS ON-BOARD AI AUDIO MONITORING CAPABILITIES > OBS STUDIO 33.0.0 RELEASE: CEF UPGRADE AND PLUGIN SYSTEM OVERHAUL > PERFORMANCE COMPARISON OF FUNCTIONAL PROGRAMMING LANGUAGES WITH C IN DEFLATE COMPRESSION > TECHNICAL ANALYSIS OF BLOCK BLAST'S AD-DRIVEN PLAYER EXPLOITATION MECHANISMS > APPLE SECURITY RESEARCH DEVICE PROGRAM FOR IOS VULNERABILITY RESEARCH > THE EVOLUTION OF DISTRIBUTED SQLITE: 12 YEARS OF INNOVATION AND ECOSYSTEM GROWTH > BANKING APPS EXPAND COMPATIBILITY WITH GRAPHENEOS > STARTUPS' CUSTOMER ACQUISITION STRATEGIES BEYOND VIRAL GROWTH > OPENAI SHIFTS AI TRAINING TO CACHED INTERNET DATA AMID SECURITY CONCERNS> CISA ADDS CRITICAL VULNERABILITIES IN COLLABORA ONLINE AND ARISTA VELOCLOUD TO KEV LIST > SAMSUNG TV REVERSE ENGINEERING REVEALS ON-BOARD AI AUDIO MONITORING CAPABILITIES > OBS STUDIO 33.0.0 RELEASE: CEF UPGRADE AND PLUGIN SYSTEM OVERHAUL > PERFORMANCE COMPARISON OF FUNCTIONAL PROGRAMMING LANGUAGES WITH C IN DEFLATE COMPRESSION > TECHNICAL ANALYSIS OF BLOCK BLAST'S AD-DRIVEN PLAYER EXPLOITATION MECHANISMS > APPLE SECURITY RESEARCH DEVICE PROGRAM FOR IOS VULNERABILITY RESEARCH > THE EVOLUTION OF DISTRIBUTED SQLITE: 12 YEARS OF INNOVATION AND ECOSYSTEM GROWTH > BANKING APPS EXPAND COMPATIBILITY WITH GRAPHENEOS > STARTUPS' CUSTOMER ACQUISITION STRATEGIES BEYOND VIRAL GROWTH > OPENAI SHIFTS AI TRAINING TO CACHED INTERNET DATA AMID SECURITY CONCERNS