Netcrook
South America
Claim First, Proof Later: Ecopetrol Pulled Into a Ransomware Spotlight
A group calling itself thegentlemen has claimed an attack tied to Ecopetrol, but the available record does not verify compromise, theft, or disruption.
Extortion Post Targets Colombia's Energy Giant, but the Claim Still Needs Proof
A newly listed ransomware-style victim entry names Ecopetrol and pushes a large data and dollar claim, but the technical evidence remains unverified.
Qilin Claim Casts a Shadow Over Famesa's Public Web Presence
A ransomware-linked post names Famesa and a specific website, but the allegation remains unverified and the operational impact is still unclear.
Qilin Lists Famesa as a New Victim
A fresh victim listing may be intended as extortion pressure, but it does not by itself confirm a breach, data theft, or operational impact.
Nova’s Ransomware Claim Leaves Too Many Questions Open
A post naming FMZ-Tecnologia-em-Sistemas provides a hash and little else, leaving defenders with a claim that is real enough to verify but not yet real enough to trust.
Victim Listing Turns a Book-Industry ERP Into a Ransomware Pressure Point
A Nova-linked victim entry involving FMZ Tecnologia em Sistemas shows how sector-specific software can become a leverage target even when the full incident picture is still unconfirmed.
Dragonforce Listing Puts NewNet in the Ransomware Frame
A public victim listing tied to Dragonforce names NewNet, but the available material does not establish a verified breach or any downstream impact.
When the Lab Stack Becomes a Safety Stack
AFIP’s security overhaul shows how a diagnostics operation can turn cybersecurity into part of clinical governance instead of treating it as back-office IT.
Official Domains, Unofficial Payloads: The Hidden Risk in Hijacked Government Sites
More than 20 Brazilian government websites were reportedly turned into malware delivery nodes, showing how trusted public infrastructure can become part of a wider attack chain.
DragonForce Claim Draws a Line to Petrini-Valores, but the Evidence Still Stops at the Post
A ransomware claim tied to Petrini-Valores names petrini.com.ar, yet the available record does not confirm breach scope, stolen data, or the intrusion path.
Ransomware Claim Casts a School Website Into a Public Pressure Test
A post linked to cmdorganization names Saint-Georges-School and www.sgs.edu.co, but the alleged attack remains unverified and the operational impact is unclear.
Extortion Claim Targets a Bogotá School, but the Evidence Stops Short
A public victim listing names Saint George's School, yet the available material does not confirm breach scope, data theft, or how the claim was generated.
Brazil’s June Ransomware Count Puts It in a New Crosshairs
A June ranking placed Brazil 3rd in ransomware activity, with 23 cases recorded by Ransomware.live.
Qilin Publishes New Victim Post Naming Sedemi
A posted claim naming Sedemi is a reported ransomware marker, not confirmation of a verified breach or operational impact.
Qilin Claim Puts Sedemi in the Crosshairs, but Proof Is Still Thin
A ransomware post names Sedemi, ties the allegation to Qilin, and provides a hash, yet the available record stops short of confirming a breach.
Qilin Claim Circulates as Busscar-de-Colombia Is Named in Ransomware Post
A published claim links Qilin to Busscar-de-Colombia, but the incident remains unverified and the posted metadata is limited to a hash and an undisclosed target website field.
Extortion Post Puts an Argentine Law Firm in the Crosshairs, but the Evidence Is Thin
Dragonforce has named Nicholson y Cano Abogados as a victim, yet the public record shown here does not confirm a breach, stolen data, or operational fallout.
Claimed Ransomware Strike Leaves Only a Thin Evidence Trail
A named organization appears in a ransomware extortion post, but the record stops short of proving an actual breach, theft, or downstream impact.
Legal PDFs, Silent Prompts, Real Risk: Why Court Documents Can Bend AI Workflows
A legal filing is usually built for human review, but once it enters an AI pipeline it can become untrusted machine context, and that shift is where prompt injection starts to matter.
Brazil’s Security Budgets Rose. Phishing Found the Weakest Door Anyway.
A long-running survey of Brazilian companies shows stronger security investment, yet phishing still climbed sharply, underscoring how identity abuse can keep working even when defenses mature.