REALBREEZE
- Family
- Malware family
- Profile updated
- 2026-09-08 06:52:27
Targeted industries: financial-services retail-and-hospitality
Targeted regions: country_code:br
Context
REALBREEZE is a custom credential brute-forcing utility used by BREEZE COMET (also tracked as PLUMP SPIDER) against Brazilian financial organisations. It targets LDAP, which the group uses to work its way into Active Directory. The public reporting names the tool and its purpose but states neither its implementation language nor the platforms it runs on, so neither is asserted here.
Used by threat actors
- BREEZE COMET (threat-actor)