Skip to content
CybercrimeFinancialIntermediate sophistication · Small team

SCARLET LOOP

SCARLET LOOP is a cybercrime syndicate with a financial motive, tracked by Brandefense. It targets the Finance sector in Brazil. It uses 2 MITRE ATT&CK techniques.

Techniques
2
Exploited CVEs
No CVE data
First seen
Feb 28, 2026
Last seen
Sep 11, 2026
Record updated

Who They Target.

Sectors · 1
Countries · 1
Labelsaccount-takeoverai-assistedcredential-stuffingcybercrimeportuguese-speaking

About SCARLET LOOP.

SCARLET LOOP is assessed to be a Portuguese-speaking, financially motivated threat group operating an AI-assisted credential-stuffing and account-takeover platform. It prioritizes services holding financial or redeemable value, with reported targeting of Brazil. Publicly documented activity includes automated target selection, login testing with previously exposed credentials and delivery of validated results through private messaging channels.

Last updated Oct 15, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.