RSA: Boleto Fraud Ring in Brazil Linked To Billions in Bogus Transactions

RSA researchers uncovered a large-scale banking malware campaign in Brazil targeting the widely used Boleto payment system; the malware conducted man-in-the-browser attacks that altered payment details and redirected funds into mule accounts. The report attributes 495,753 compromised boleto transactions tied to 8,095 fraudulent boleto IDs over two years, estimates the botnet at ~200,000 infected systems, and cites an estimated transaction value of approximately $3.75 billion USD.