https://mensvr.com/ Hands-on investigations into the malware, infrastructure and people behind Brazilian cybercrime. en Fri, 14 Aug 2026 12:00:00 GMT https://mensvr.com/indigo-shark https://mensvr.com/indigo-shark Fri, 14 Aug 2026 12:00:00 GMT Malware From an exposed SMB share to a Node.js RAT with keylogging, screen streaming, shellcode injection and Tor based C2. A full mapping of a Brazilian operation active since 2025. https://mensvr.com/midia22 https://mensvr.com/midia22 Mon, 09 Feb 2026 12:00:00 GMT Threat Intel Brazilian access broker Midia22 monetizes live government and institutional access via Telegram, enabling large-scale fraud through insider-driven credential and system compromise. https://mensvr.com/phantomcard https://mensvr.com/phantomcard Wed, 17 Sep 2025 12:00:00 GMT Malware An analysis of PhantomCard, a new Android trojan that performs real-time payment fraud using a novel NFC relay attack. This article covers its threat actor profile, attack vector and technical details. https://mensvr.com/sinobi https://mensvr.com/sinobi Tue, 15 Jul 2025 12:00:00 GMT Ransomware A breakdown of the new Sinobi ransomware group, including a technical malware analysis, its attack methods, and critical Indicators of Compromise.