🇧🇷
Threats to Brazil
Ransomware intelligence focused on Brazil: who attacks Brazilian companies, which sectors are most targeted and which vulnerabilities these groups exploit. Source: ransomware.live + MITRE ATT&CK.
562catalogued Brazilian victims
106groups active against Brazil
207in the last year
Groups most attacking Brazil
Ransomware operations by number of known Brazilian victims.
Most targeted Brazilian sectors
Vulnerabilities in the crosshairs
CVEs exploited by the groups active against Brazil (MITRE attribution) and CVEs flagged by CISA as used in ransomware campaigns. If your stack has any of these, you are within their reach.
CVE-2019-19781CRITICALEPSS 100%ransomware useKEVCVE-2021-21985CRITICALEPSS 100%ransomware useKEVCVE-2021-35464CRITICALEPSS 100%ransomware useKEVCVE-2019-0708CRITICALEPSS 100%ransomware useKEVCVE-2024-21887CRITICALEPSS 100%ransomware useKEVCVE-2022-26134CRITICALEPSS 100%ransomware useKEVCVE-2019-11510CRITICALEPSS 100%ransomware useKEVCVE-2020-5902CRITICALEPSS 100%ransomware useKEVCVE-2023-27350CRITICALEPSS 100%ransomware useKEVCVE-2023-0669HIGHEPSS 100%ransomware useKEVCVE-2021-22005CRITICALEPSS 100%ransomware useKEVCVE-2023-35078CRITICALEPSS 100%ransomware useKEVCVE-2024-23897CRITICALEPSS 100%ransomware useKEVCVE-2021-34473CRITICALEPSS 100%ransomware useKEVCVE-2023-4966CRITICALEPSS 100%ransomware useKEVCVE-2021-40438CRITICALEPSS 100%ransomware useKEVCVE-2023-35082CRITICALEPSS 100%ransomware useKEVCVE-2021-44228CRITICALEPSS 100%ransomware useKEVCVE-2024-3400CRITICALEPSS 100%ransomware useKEVCVE-2018-13379CRITICALEPSS 100%ransomware useKEVCVE-2022-29464CRITICALEPSS 100%ransomware useKEVCVE-2021-26855CRITICALEPSS 100%ransomware useKEVCVE-2017-5638CRITICALEPSS 100%ransomware useKEVCVE-2021-26084CRITICALEPSS 100%ransomware useKEV
Recent attacks in Brazil
Victims announced by the groups themselves on their leak sites. These are attacker claims — not confirmations by the company. Many prove true; others are exaggeration or bluff. We verify the relevant ones in Incidents.