Loading threat actor…
Primeiro Comando da Capital (PCC) is a Brazilian organized crime group and major drug-trafficking organization. It is widely known by the acronym PCC and has also been referred to as Primeiro Comando da Capital (PCC). The group operates within Brazil’s criminal ecosystem and has been documented using cryptocurrency as part of its financial operations. Available reporting in this context links PCC to cartel-related money-laundering activity associated with Brazil’s role as both a cocaine trafficking transit corridor and a destination market. The actor is identified as part of the broader Brazilian organized-crime landscape alongside Comando Vermelho. In the United States, PCC has been designated a Foreign Terrorist Organization. High-confidence information in this context supports characterization of PCC primarily as a financially motivated criminal actor involved in narcotics-linked illicit finance and cryptocurrency-enabled laundering activity; more specific cyber intrusion tradecraft, victimology, or ransomware operations are not established here.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
Who, where, and (when attributed) which flag flies behind the operation. Pulled from open-source reporting and Mallory's analyst review.
Sectors the actor has been observed targeting.
Geographies tied to known operations.
Attributed origin per open-source reporting.
2 distinct techniques observed across reporting, grouped by tactic. Hover any cell for the evidence excerpt; click through for MITRE's full description.
3 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Brazilian organized crime group documented using cryptocurrency as part of its financial operations, in the context of cartel-related money laundering flowing through Brazilian exchanges.
Grupo do crime organizado brasileiro documentado usando criptomoedas como parte de suas operações financeiras, no contexto de lavagem de dinheiro relacionada a cartéis e tráfico de drogas.
Referenced comparatively as a criminal organization with a federated or horizontally organized structure relevant to discussions of armed-group organization and resilience.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.