babuk2

Ransomware
Sourceransomware.live

Vexday analysis

Babuk2, também conhecido como Bjorka ou SkyWave, é uma operação de ransomware que, após não obter lucro com a venda de bases de dados públicas em fóruns, passou a se passar pelo grupo Babuk Ransomware. Para sustentar a impostura, o agente criou um blog no qual reapresentou vazamentos públicos obtidos no BreachForums como se fossem ataques de ransomware de sua própria autoria. Foram identificadas 15 vítimas associadas a essa operação no Brasil.

Exploited vulnerabilities

No CVEs attributed to this group in public sources (MITRE ATT&CK). Absence of attribution does not mean absence of activity.

Impact and victims

The group babuk2 has 15 known ransomware victims. See the most affected sectors and countries and recent victims.

15known victims
15in Brazil
8sectors hit
Most attacked sectors
Manufacturing4
Government & Defense3
Professional Services2
Retail & E-Commerce2
Technology1
Hospitality1
Transportation1
Agriculture and Food Production1
Most affected countries
🇧🇷 Brasil15
Recent victims
uniproof.com.brProfessional Services · BR · 2025-04-01
brune.com.br - Group MC (conglomerate)Manufacturing · BR · 2025-03-29
Municipal taxation Secretariat Access - Brazil GovermentGovernment & Defense · BR · 2025-03-19
nuclep.gov.br. Nuclep BrazilGovernment & Defense · BR · 2025-03-13
fnde.gov.br brazilian governmentGovernment & Defense · BR · 2025-03-11
Mandarin.com.brRetail & E-Commerce · BR · 2025-03-10
copral.com.brManufacturing · BR · 2025-01-27
viacaojacarei.com.brTransportation · BR · 2025-01-27
gelco-s-a.com.brManufacturing · BR · 2025-01-27
sincorpe.org.brProfessional Services · BR · 2025-01-27
www.shootinghouse.com.brRetail & E-Commerce · BR · 2025-01-27
www.ykp.com.brTechnology · BR · 2025-01-27
www.spmundi.com.brManufacturing · BR · 2025-01-27
www.agenciahost.comHospitality · BR · 2025-01-27
www.lapastina.comAgriculture and Food Production · BR · 2025-01-27

babuk2 uses real techniques and exploits real flaws. TrueHacking's AI Autonomous Pentest simulates these attacks against your infrastructure and brings more security to your application.

Explore the AI Autonomous Pentest →