Summary
Written by ThreatClusterfrom site fields, file listing, victim profile, leak post, screenshot, ransom noteThe emperador group claims to have complete, unrestricted access to the Prefeitura Municipal de Arcos' internal infrastructure (domain arcos.mg.gov.br), with all servers, databases, emails, and admin credentials exfiltrated and critical systems encrypted. They also claim a data size of 462.3 MB and have published a sample file named arcos.mg.gov.br.zip; the leak page shows a 14-day countdown to respond, after which data would be published and permanent loss would occur. The leak page identifies the victim as Prefeitura Municipal de Arcos (arcos.mg.gov.br) and states the publication status as published.
Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.
What was taken
We hold complete, unrestricted access to your internal infrastructure. All servers, databases, emails, and admin credentials have been exfiltrated. Critical systems have been encrypted. We have your data. You do not. You have 14 days to respond. No response = data published + permanent loss. Contact us through the provided channel. No third parties. No recovery attempts.
Ransom note
Published by the group on their leak site, reproduced verbatim.
We hold complete, unrestricted access to your internal infrastructure. All servers, databases, emails, and admin credentials have been exfiltrated. Critical systems have been encrypted. We have your data. You do not. You have 14 days to respond. No response = data published + permanent loss. Contact us through the provided channel. No third parties. No recovery attempts.
Also stated on the leak page
Fields this group publishes that do not map to a standard column. Labels are the site's own.
- To Publish
- arcos.mg.gov.br.zip
Leak-site images (1)
Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.