Ransomware Group: BABUK

VICTIM NAME: viacaojacarei[.]com[.]br

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the BABUK Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page related to the victim, JACAREÍ TRANSPORTE URBANO LTDA, outlines the circumstances surrounding the breach, emphasizing the nature of the data that has been compromised. The page indicates a total data volume of 258GB, although specific download links to the sensitive data were not present at the time of browsing. Only a single image was included on the page, described generically as a screenshot illustrating the type of data that was downloaded. It appears that the attacker intends to provide more details that could become available after a timer countdown is completed, suggesting potential access to the leaked data following this delay.

JACAREÍ TRANSPORTE URBANO LTDA is identified as a company based in Jacareí, Brazil, specializing in public passenger transport services. They have been recognized for implementing quality management systems in their operations. The leak page contained various business-related contact details including a phone number and a corporate email, which have been sanitized to prevent the exposure of sensitive information. Overall, the content suggests a significant data breach that may have ramifications for the company’s operations and its clients, but specific details beyond the introductory remarks were not disclosed on the leak page.