RansomHub Strikes Fábrica Info: A Ransomware Attack on a Leading Brazilian Company
Incident Date:
April 18, 2024
Overview
Title
RansomHub Strikes Fábrica Info: A Ransomware Attack on a Leading Brazilian Company
Victim
Fabrica Info Brazil
Attacker
Ransomhub
Location
First Reported
April 18, 2024
RansomHub Targets Fábrica Info in Ransomware Attack
Attack Overview
A Brazilian company specializing in document digitization services, Fábrica Info, has fallen victim to a ransomware attack orchestrated by the cybercriminal group RansomHub. The attack led to the theft of approximately 11.6 gigabytes of sensitive data, including customer information, personal documents, and internal company data. A sample of this data has been publicly leaked on RansomHub's dark web site as proof of the breach.
Company Profile
Fábrica Info operates primarily in the business services sector, focusing on transforming physical records into digital formats. As a leader in document digitization, the company offers innovative solutions that cater to a variety of industries seeking to digitize their operational processes. The CEO, Naje Cavalcante, has been pivotal in steering the company towards integrating advanced digital solutions.
The company's prominence in the digital document management sector, combined with its extensive data repositories, makes it an attractive target for cybercriminals like RansomHub.
RansomHub's Modus Operandi
RansomHub, known for its Ransomware-as-a-Service (RaaS) model, allows affiliates to carry out attacks while offering them a substantial share of the ransom payments. This model not only incentivizes widespread participation but also diversifies the risk and reach of their operations. The group's strategy includes the use of tactics commonly seen in Russian ransomware circles, although they claim to avoid targeting certain countries and non-profit organizations.
Sources
Recent Ransomware Attacks
The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.
The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.