REF9334
REF9334 is a Brazil-attributed cybercrime syndicate with a financial motive, tracked by Brandefense. It targets the Finance sector in Brazil. It uses 9 MITRE ATT&CK techniques.
- Origin
- Brazil
- Techniques
- 9
- Exploited CVEs
- No CVE data
- Record updated
Who They Target.
About REF9334.
A financially motivated cyber threat actor observed deploying the KREMLIN malware ecosystem against Brazilian banking users and financial institutions.
Last updated Sep 27, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.