#Unit 42
This archive brings together analysis, investigations, and alerts tied to Unit 42 threat intelligence, with an emphasis on campaigns, techniques, and actors affecting organizations across Latin America. Readers will find coverage of malware, phishing, intrusions, vulnerabilities, and defensive trends, all framed through a technical and regional lens.
Brazil: Panzer and Play list new victims
Panzer claimed K3G Solutions and Play claimed Metallco. Unit 42 also reported a phishing campaign against Brazil's financial sector.
Sep 22, 2026 · 2 min
Brazil financial sector targeted by Unit 42
Unit 42 found two active campaigns in Latin America. One targeted Brazil's financial sector with job phishing, RATs and SOCKS5 tunnels.
Sep 14, 2026 · 2 min
Mexico, Brazil Face AI-Linked Intrusions
Unit 42 and other reports detail active campaigns in Mexico, Ecuador and Brazil using LLMs, NextChat and shared SOCKS5 relays.
Sep 8, 2026 · 5 min
Mexico, Brazil, Ecuador in CL-CRI-1131, 1163
Unit 42 tracked two AI-assisted intrusion clusters in Mexico, Ecuador and Brazil, using NextChat, Claude
Sep 7, 2026 · 38 min
Unit 42 Tracks CL-CRI-1131
Unit 42 found two AI-linked clusters targeting governments, water, and banks in Mexico, Ecuador, and Brazil since February 2026.
Sep 7, 2026 · 36 min
Mexico, Brazil campaigns hit by Unit 42
Unit 42 linked two active campaigns to transport, government, water, and financial targets in Mexico, Ecuador
Sep 5, 2026 · 4 min