MalwareCheck Point Research·3 hours ago
Gaming the system: how a Chinese-speaking actor turned Brazilian government sites into an SEO weapon
Since mid-2025, Check Point Research has tracked a sustained campaign targeting Brazilian organizations attributed to a Chinese-speaking cybercrime group linked to Earth Berberoka, an actor previously documented targeting gambling sites across Asia. The attackers compromise victim systems and deploy a custom Linux toolkit including a downloader and multiple backdoors to establish persistence. The campaign appears designed to leverage compromised Brazilian government sites for SEO manipulation purposes.