Ransomware Group: FUNKSEC

VICTIM NAME: agti[.]eng[.]br

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the FUNKSEC Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page related to AGTI Engenharia, a construction company based in Brazil, was published on December 19, 2024. The page outlines vital information about the organization, which specializes in engineering solutions, project management, and infrastructure development. The company is noted for its innovative approach and commitment to quality in various sectors. The leak was associated with the hacking group known as funksec, which targets companies to expose sensitive data. The details presented on the leak page indicate a potential compromise of several user accounts along with information about third-party entities.

According to the data extracted, AGTI Engenharia has reported an affected user base comprising 69 individuals, with additional details on third-party domains and specific employees mentioned. The leak page appears to contain screenshots that might showcase internal documents or other sensitive data, although specifics have been redacted for security reasons. The presence of download links for further data extraction was also noted. The incident emphasizes the vulnerabilities that organizations in the construction industry face amid increasing cybersecurity threats.