Tag: brazil tax lure

1 Attack Reports | 0 Vulnerabilities

Attack reports

The Demon Arrives Later: A Havoc Stager Hides Behind Microsoft Defender DLP

Cybercriminals in Brazil are exploiting the country's electronic invoice system (Nota Fiscal eletrônica) to deliver Havoc framework implants. The campaign surfaced during May 2026, coinciding with tax season when accountants routinely process invoice-related emails. Attackers distribute malicious Z…

brazil tax lure

invoice phishing

Published: June 3, 2026

Linked vulnerabilities : CVE-2026-45585 (CVSS 6.8)

Downloadable IOCs: 23

Click here to see more Attack Reports