logo

Nefilim Ransomware Hits Brazilian Conglomerate

ID: 14ba170b-ee28-53a4-844c-1ecc7979fbf0

STIX ID: report--14ba170b-ee28-53a4-844c-1ecc7979fbf0

Feed Name: Cyble Blog

Threat Score
70/100

Date Published: 2025-02-18

Date Updated: 2026-07-20

...
...

The report describes Nefilim ransomware operators leaking Cosan corporate data after failed ransom negotiations; security firm Cyble verified published archives in multiple parts (initially >3.1GB, then >5.2GB and ~20GB) and shared directory listings and screenshots, indicating an active extortion/data-exfiltration incident targeting the Brazilian conglomerate.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.