Ransomware Attack on Mesopolys - Mediação Imobiliária Lda.

Incident Date:

May 18, 2024

World map

Overview

Title

Ransomware Attack on Mesopolys - Mediação Imobiliária Lda.

Victim

Mesopolys - Mediação Imobiliária Lda.

Attacker

SpaceBears

Location

Braga, Portugal

, Portugal

First Reported

May 18, 2024

Ransomware Attack on Mesopolys - Mediação Imobiliária Lda.

Victim Overview

Mesopolys - Mediação Imobiliária Lda. is a real estate agency based in Braga, Portugal. The company specializes in real estate mediation, including buying, selling, and renting properties, with a strong focus on property listings and sales. They have a significant presence in the industry, with multiple offices and a large portfolio of properties, including apartments and houses.

Attack Overview

The ransomware group SpaceBears has claimed an attack on Mesopolys - Mediação Imobiliária Lda. via their dark web leak site. The attack method used was ransomware, which poses potential dangers that could disrupt business continuity and lead to data loss for the victim.

Ransomware Group - SpaceBears

SpaceBears is a new ransomware group that has targeted prominent organizations, including Mesopolys. The group is known for demanding hefty ransom amounts in exchange for decryption keys to unlock victims' data. They have a clearnet website hosted in Moscow, Russia, suggesting a potential Russian-based origin.

Attack Vulnerabilities

Mesopolys' strong online presence and extensive property listings may have made them a target for cybercriminals. The company's valuable data and financial transactions related to real estate could have been attractive to threat actors looking to extort ransom through ransomware attacks.

Sources

Recent Ransomware Attacks

The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.

The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.