Overlord RAT Deploys Fake Brazilian Legal Notices to Infect Windows PCs
WatchGuard reports a phishing campaign that uses counterfeit Brazilian legal notices to deliver the Overlord Remote Access Trojan to Windows workstations. The technique highlights the need for documented security‑awareness training and continuous monitoring to satisfy audit requirements.
ADTP Breach Watch· October 23, 2026· HackRead
SeverityHigh
Type🎣 Threat intel
ConfidenceHigh
ReportedOct 23, 2026
Technology & SaaSFinancial services firms operating in BrazilTechnology SaaS providers with Portuguese‑speaking staffProfessional services organizations using Windows endpointsPhishing
What happened
A wave of phishing emails posing as official Brazilian legal notices carries malicious attachments that install the Overlord RAT on Windows PCs. The same campaign also references Lampion malware and a separate remote‑access payload.
Why it matters for trust and compliance
The incident underscores the importance of a control‑assurance program that records security‑awareness training and monitors user‑click behavior, providing defensible evidence for auditors across multiple frameworks.
Demonstrates the need for continuous security‑awareness training metrics as audit evidence.
Shows value of logging phishing‑click events and RAT detection for control monitoring.
Who is affected
Financial services firms operating in BrazilTechnology SaaS providers with Portuguese‑speaking staffProfessional services organizations using Windows endpoints
Recommended actions
Update security‑awareness training to cover fake legal‑notice phishing and run targeted simulations.
Enable email‑gateway filtering and attachment sandboxing for malicious Office documents.
Deploy EDR signatures for Overlord RAT and log execution events for audit trails.
Regulations library
Every US state privacy law, on one map
24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.