🇧🇷

Threats to Brazil

Ransomware intelligence focused on Brazil: who attacks Brazilian companies, which sectors are most targeted and which vulnerabilities these groups exploit. Source: ransomware.live + MITRE ATT&CK.

655catalogued Brazilian victims
122groups active against Brazil
279in the last year

Groups most attacking Brazil

Ransomware operations by number of known Brazilian victims.

Most targeted Brazilian sectors

Professional Services115
Manufacturing98
Technology81
Healthcare62
Agriculture and Food Production52
Retail & E-Commerce44
Transportation40
Education36
Government & Defense35
Energy & Utilities21

Vulnerabilities in the crosshairs

CVEs exploited by the groups active against Brazil (MITRE attribution) and CVEs flagged by CISA as used in ransomware campaigns. If your stack has any of these, you are within their reach.

Recent attacks in Brazil

Victims announced by the groups themselves on their leak sites. These are attacker claims — not confirmations by the company. Many prove true; others are exaggeration or bluff. We verify the relevant ones in Incidents.

2026-11-05SistelAoqinTechnology
2026-11-04Interativa Plasticos (Interplast)medusalockerManufacturing
2026-11-04centratamagroup.comlockbit5Other
2026-11-03MAPFRE Brasil 2026DestelloFinancial Services
2026-11-02Secretaria de Estado de SaúdethegentlemenGovernment & Defense
2026-11-02Solutis TecnologiasthegentlemenTechnology
2026-11-02Coemi ImóveisthegentlemenRetail & E-Commerce
2026-10-31Punta ShoppingemperadorRetail & E-Commerce
2026-10-19GTL Concreto e Logística LTDAemperadorManufacturing
2026-10-16Prafesta Ind. e Com. de Embalagens LtdaN0nManufacturing
2026-10-16Hospital Sírio-LibanêsTHE SEVEN DEADLY SINSHealthcare
2026-10-15Brame TelecomqilinTechnology
2026-10-15MPI LTDAemperadorOther
2026-10-14Universidade de Passo FundothegentlemenEducation
2026-10-14CLIMEDIthegentlemenHealthcare
Which of these threats target YOUR stack?
In 10 seconds, see the actively exploited vulnerabilities and the groups exploiting the technologies you use. Free report in your inbox.
Run my X-Ray →