Slim Spider Steals Crypto Custody Secrets From Brazilian Financial Institution

Summary

A new financially motivated threat actor, dubbed Slim Spider by CrowdStrike, has been targeting Brazilian financial institutions since March 2026. The group exhibits in-depth knowledge of Brazil's financial infrastructure, particularly its instant payment systems.

IFF Assessment

FOE

This article details the emergence of a new financially motivated threat actor targeting financial institutions, which is bad news for defenders.

Defender Context

Defenders should be aware of new financially motivated threat actors like Slim Spider, especially those showing sophisticated knowledge of specific regional financial infrastructure. This highlights the need for continuous monitoring and threat intelligence sharing to understand evolving attack methodologies.

Read Full Story →