Arcus Media Ransomware Strikes MGEMAL in Brazil
Ransomware Attack on MGEMAL by Arcus Media: A Cybersecurity Analysis
MGEMAL, officially known as Grupo MGEMAL, is a Brazilian company based in Niterói that specializes in administrative and financial management services. With over 35 years of experience, MGEMAL has established itself as a leading administrator of condominiums and associations in the region, recognized for its comprehensive range of services and commitment to client satisfaction.
Company Profile
MGEMAL operates as a small to medium-sized enterprise, employing between 11 to 50 individuals. The company is privately held and focuses on providing management solutions for condominiums and associations, catering to both large and small clients in Brazil. Their core offerings include accounting, administration, and legal advisory services, emphasizing agility, security, and efficiency in their operations.
Attack Overview
Arcus Media, a ransomware group operating as Ransomware-as-a-Service (RaaS), targeted MGEMAL in a recent attack discovered on November 22, 2024. The group claims to have accessed the organization's data, although the extent of the leak is currently unknown. Arcus Media is known for its aggressive tactics, including phishing emails with malicious attachments, custom ransomware binaries, and double extortion methods.
Arcus Media Ransomware Group
Arcus Media distinguishes itself by operating as a RaaS, allowing other cybercriminals to utilize its malware for attacks. The group targets various sectors globally, including business services, healthcare, telecommunications, and education. They employ sophisticated techniques like data encryption and exfiltration, maintaining communication through TOR networks and encrypted messaging platforms for ransom negotiations.
See Halcyon in action
Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!