Tomiris is using public-service C2 implants and new phishing chains to stealthily deploy multi-language malware across targeted government networks.
Water Saci and RelayNFC drive advanced Brazil-targeted attacks using WhatsApp worm tactics and real-time NFC payment theft.