Operation Comando

Primary motivation
financial-gain
Sophistication
minimal
Resource level
individual
Actor type
criminal
Profile updated
2026-07-07 11:56:41

Targeted industries: retail-and-hospitality

Context

Operation Comando is a pure cybercrime campaign, possibly with Brazilian origin, with a concrete and persistent focus on the hospitality sector, which proves how a threat actor can be successful in pursuing its objectives while maintaining a cheap budget. The use of DDNS services, publicly available remote access tools, and having a minimum knowledge on software development (in this case VB.NET) has been enough for running a campaign lasting month, and potentially gathering credit card information and other possible data.

Reports & references

  • Palo Alto Unit 42 — Operation Comando Or How To Run A Cheap And Effective Credit Card Business (report)

External references