PhantomEnigma utilized over 20 compromised Brazilian government websites and mailboxes to distribute a modular Node.js backdoor and associated payloads.

How this affects you

This incident highlights a vulnerability in government digital infrastructure, enabling threat actors to leverage official channels for cyberattacks. The use of hijacked sites broadens the attack surface and potentially increases the reach of malicious payloads.