Summary
Written by ThreatClusterfrom site fields, file listing, victim profile, leak post, screenshot, ransom noteThe leak claims Uniguacu exfiltrated 151.0 MB of data, including confidential and financial information, with a sample file named sensitive_data_db.sql.gz. The leak page is published and shows a countdown of 13 days to trade. Victim profile lists the domain uniguacu.com.br.
Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.
What was taken
full commitment of the network having full access to infrastructure, thus ensuring access to the database containing confidential and financial information! I obtained some images that compromise the financial sector. You have 13 days to trade. If the trade doesn't occur as planned, we will have to take severe measures. I sent some images to show the veracity of the attack. The warning has been given!
Ransom note
Published by the group on their leak site, reproduced verbatim.
full commitment of the network having full access to infrastructure, thus ensuring access to the database containing confidential and financial information! I obtained some images that compromise the financial sector. You have 13 days to trade. If the trade doesn't occur as planned, we will have to take severe measures. I sent some images to show the veracity of the attack. The warning has been given!
Also stated on the leak page
Fields this group publishes that do not map to a standard column. Labels are the site's own.
- warning
- The warning has been given!
- To Publish
- sensitive_data_db.sql.gz (151.0 MB)
Leak-site images (1)
Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.