RansomHub Strikes Fábrica Info: A Ransomware Attack on a Leading Brazilian Company
RansomHub Targets Fábrica Info in Ransomware Attack
Attack Overview
A Brazilian company specializing in document digitization services, Fábrica Info, has fallen victim to a ransomware attack orchestrated by the cybercriminal group RansomHub. The attack led to the theft of approximately 11.6 gigabytes of sensitive data, including customer information, personal documents, and internal company data. A sample of this data has been publicly leaked on RansomHub's dark web site as proof of the breach.
Company Profile
Fábrica Info operates primarily in the business services sector, focusing on transforming physical records into digital formats. As a leader in document digitization, the company offers innovative solutions that cater to a variety of industries seeking to digitize their operational processes. The CEO, Naje Cavalcante, has been pivotal in steering the company towards integrating advanced digital solutions.
The company's prominence in the digital document management sector, combined with its extensive data repositories, makes it an attractive target for cybercriminals like RansomHub.
RansomHub's Modus Operandi
RansomHub, known for its Ransomware-as-a-Service (RaaS) model, allows affiliates to carry out attacks while offering them a substantial share of the ransom payments. This model not only incentivizes widespread participation but also diversifies the risk and reach of their operations. The group's strategy includes the use of tactics commonly seen in Russian ransomware circles, although they claim to avoid targeting certain countries and non-profit organizations.
Sources
See Halcyon in action
Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!