They Stole the Keys to Brazil’s Payment Rails, Then Sent Hundreds of Transfers

BREEZE COMET stole the credentials and certificates behind trusted Brazilian payment workflows, then executed hundreds of fraudulent transactions within 24 to 48 hours.

BREEZE COMET stole the credentials and certificates behind trusted Brazilian payment workflows, then executed hundreds of fraudulent transactions within 24 to 48 hours.

A faulty provider update enabled approximately €30 million in fraud. The case shows why payment integrity needs controls beyond software testing.