Brazilian Cybercriminals Using LOLBaS and CMD Scripts to Drain Bank Accounts

The attack chain primarily leverages social engineering, banking on Portuguese and Spanish emails containing tax- or traffic violation-themed lures to trigger the infections and gain unauthorized access to victims' systems.