beast

Ransomware
Sourceransomware.live

Vexday analysis

Beast é uma operação de ransomware operada no modelo Ransomware-as-a-Service (RaaS) que oferece recursos como varredura SMB, criptografia de arquivos, inicialização e interrupção de serviços e processos, além de identificação geográfica para evitar a criptografia em países da CEI. Cinco vítimas brasileiras já foram atribuídas a essa operação.

Exploited vulnerabilities

No CVEs attributed to this group in public sources (MITRE ATT&CK). Absence of attribution does not mean absence of activity.

Impact and victims

The group beast has 5 known ransomware victims. See the most affected sectors and countries and recent victims.

5known victims
5in Brazil
5sectors hit
Activity (12 months)
10
11
Most attacked sectors
Energy & Utilities1
Healthcare1
Manufacturing1
Professional Services1
Retail & E-Commerce1
Most affected countries
🇧🇷 Brasil5
Recent victims
NoroacoManufacturing · BR · 2025-11-06
Bolt Electricity, Oil & GasEnergy & Utilities · BR · 2025-10-15
Danthi Comunicacao IntegradaProfessional Services · BR · 2025-10-15
Escauto Centro AutomotivoRetail & E-Commerce · BR · 2025-08-16
Hospital Sao Jose do Avai (HSJA)Healthcare · BR · 2024-03-27

beast uses real techniques and exploits real flaws. TrueHacking's AI Autonomous Pentest simulates these attacks against your infrastructure and brings more security to your application.

Explore the AI Autonomous Pentest →