← All sectors

Ransomware in the Hospitality sector

The Hospitality sector has 6 known ransomware victims in Brazil. See the groups behind the attacks and the recent trend.

6victims

5groups

0in the last 90 days

Groups attacking Hospitality the most

ransomhub 🇷🇺2 victims

akira1 victims

babuk21 victims

clop1 victims

lockbit31 victims

Vulnerabilities exploited against this sector

CVEs exploited by the groups attacking the Hospitality sector — prioritize patching these.

CVE-2021-44228Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpointsKEVused by ransomware CVE-2023-22518All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This ImpropeKEVused by ransomware CVE-2023-35078An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionaKEVused by ransomware CVE-2023-35082An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access resKEVused by ransomware CVE-2024-3400PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtectKEVused by ransomware CVE-2019-11510In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, anKEVused by ransomware CVE-2017-5638The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exKEVused by ransomware CVE-2019-0708A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services whKEVused by ransomware CVE-2019-19781An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, anKEVused by ransomware CVE-2020-5902In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, thKEVused by ransomware CVE-2021-21985The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in tKEVused by ransomware CVE-2021-22005The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actorKEVused by ransomware

Recent victims

Plaza Brasília Hotéisakira · 2025-03-25

MUNDI.COMclop · 2025-02-27

www.agenciahost.combabuk2 · 2025-01-27

equinocioplay.com.brransomhub · 2024-06-24

Agencia Host ransomhub · 2024-04-05

gavresorts.com.brlockbit3 · 2022-09-06