alphv

Ransomware
Sourceransomware.live

Vexday analysis

ALPHV, também conhecido como BlackCat, é uma operação de ransomware cujos operadores iniciaram suas atividades em dezembro de 2021, divulgando seu programa de afiliados em fóruns da dark web e promovendo uma nova família de ransomware desenvolvida do zero na linguagem de programação Rust. Evidências indicam que os atores por trás do grupo não são novatos no cibercrime, havendo vínculos com programas de afiliados anteriores como DarkSide, BlackMatter e REvil — grupos que enfrentaram pressão e prisões após ataques a grandes empresas. No Brasil, a operação possui 11 vítimas conhecidas registradas.

Exploited vulnerabilities

No CVEs attributed to this group in public sources (MITRE ATT&CK). Absence of attribution does not mean absence of activity.

Impact and victims

The group alphv has 11 known ransomware victims. See the most affected sectors and countries and recent victims.

11known victims
11in Brazil
7sectors hit
Most attacked sectors
Government & Defense2
Professional Services2
Technology2
Education2
Transportation1
Agriculture and Food Production1
Manufacturing1
Most affected countries
🇧🇷 Brasil11
Recent victims
Prefeitura Municipal de ItabiraGovernment & Defense · BR · 2023-12-24
LCA ConsultoresProfessional Services · BR · 2023-11-24
ComflorestaAgriculture and Food Production · BR · 2023-11-06
BrData TecnologiaTechnology · BR · 2023-10-09
Grupo Cativa was hacked Huge amounts of critical information have been stolenManufacturing · BR · 2023-05-05
Fundação Carlos ChagasEducation · BR · 2023-04-26
Lisa Logística was hacked A great amount of critical information has been stolenTransportation · BR · 2023-04-21
IFPAEducation · BR · 2023-01-21
ELOTECH - HACKED AND MORE THEN 100 GB DATA LEAKED!Government & Defense · BR · 2022-12-24
RecordTVTechnology · BR · 2022-10-13
herccombrProfessional Services · BR · 2022-07-28

alphv uses real techniques and exploits real flaws. TrueHacking's AI Autonomous Pentest simulates these attacks against your infrastructure and brings more security to your application.

Explore the AI Autonomous Pentest →