beast

Ransomware
Sourceransomware.live

About the group

Beast is a Ransomware-as-a-service (RaaS) product which provides functionality such as SMB scanning, file encryption, service and process starting and stopping, and geographic identification to avoid encryption in CIS countries.

Exploited vulnerabilities

No CVEs attributed to this group in public sources (MITRE ATT&CK). Absence of attribution does not mean absence of activity.

Impact and victims

The group beast has 5 known ransomware victims. See the most affected sectors and countries and recent victims.

5known victims
5in Brazil
5sectors hit
Activity (12 months)
10
11
Most attacked sectors
Energy & Utilities1
Healthcare1
Manufacturing1
Professional Services1
Retail & E-Commerce1
Most affected countries
🇧🇷 Brasil5
Recent victims
NoroacoManufacturing · BR · 2025-11-06
Bolt Electricity, Oil & GasEnergy & Utilities · BR · 2025-10-15
Danthi Comunicacao IntegradaProfessional Services · BR · 2025-10-15
Escauto Centro AutomotivoRetail & E-Commerce · BR · 2025-08-16
Hospital Sao Jose do Avai (HSJA)Healthcare · BR · 2024-03-27

beast uses real techniques and exploits real flaws. TrueHacking's AI Autonomous Pentest simulates these attacks against your infrastructure and brings more security to your application.

Explore the AI Autonomous Pentest →