Chinese Cybercriminal Group Compromises Brazilian Government Websites for Phishing Operations

A Chinese-language cybercriminal group has compromised Brazilian government and education websites to host phishing sites. The threat actors are using these compromised servers to create a reverse-proxy network. The phishing infrastructure features gambling-themed sites hosted on the hijacked government and educational institution servers.