Ransomware Attack on Mesopolys - Mediação Imobiliária Lda.
Incident Date:
May 18, 2024
Overview
Title
Ransomware Attack on Mesopolys - Mediação Imobiliária Lda.
Victim
Mesopolys - Mediação Imobiliária Lda.
Attacker
SpaceBears
Location
First Reported
May 18, 2024
Ransomware Attack on Mesopolys - Mediação Imobiliária Lda.
Victim Overview
Mesopolys - Mediação Imobiliária Lda. is a real estate agency based in Braga, Portugal. The company specializes in real estate mediation, including buying, selling, and renting properties, with a strong focus on property listings and sales. They have a significant presence in the industry, with multiple offices and a large portfolio of properties, including apartments and houses.
Attack Overview
The ransomware group SpaceBears has claimed an attack on Mesopolys - Mediação Imobiliária Lda. via their dark web leak site. The attack method used was ransomware, which poses potential dangers that could disrupt business continuity and lead to data loss for the victim.
Ransomware Group - SpaceBears
SpaceBears is a new ransomware group that has targeted prominent organizations, including Mesopolys. The group is known for demanding hefty ransom amounts in exchange for decryption keys to unlock victims' data. They have a clearnet website hosted in Moscow, Russia, suggesting a potential Russian-based origin.
Attack Vulnerabilities
Mesopolys' strong online presence and extensive property listings may have made them a target for cybercriminals. The company's valuable data and financial transactions related to real estate could have been attractive to threat actors looking to extort ransom through ransomware attacks.
Sources
Recent Ransomware Attacks
The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.
The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.