A previously undocumented financially motivated threat actor has been linked to attacks targeting Brazilian financial institutions since at least March 2026.
Cybersecurity company CrowdStrike is tracking the Brazil-based activity cluster under the name Slim Spider.
“The adversary demonstrates deep operational knowledge of Brazilian financial infrastructure, including the instant payment