“`html
The malicious entity recognized as TA558 has been linked to a new wave of assaults introducing different remote access trojans (RATs) such as Venom RAT to infiltrate hotels in Brazil and Spanish-speaking regions.
The Russian cybersecurity firm Kaspersky is monitoring the operations, noted in the summer of 2025, to a group it refers to as RevengeHotels.
“The malicious actors persist in utilizing phishing emails containing invoices
“`