Threat actor
14 observed events
AISection9 has been observed engaging in ransomware activity. While no specific sectors were recorded, the observed targeting is in Brazil.
AIUnverified claim: Section9 listed 'And where does the newborn go from here? The net is vast and infinite.' as a victim.
AISection9 claims to have compromised ****.com.pa, according to an extortion site listing.
AISection9 claims to have breached education sector organization *****.com.pt, listed on its extortion site.
AISection9 has claimed to have breached a Uruguayan organization in the agriculture and food production sector, per a listing on Ransomware.live.
AISection9 claims to have breached ****.fr, a retail and e-commerce entity, per an unverified listing on Ransomware.live.
AISection9 has listed ********.com on its extortion site, alleging a data breach.
AISection9 claims to have compromised a healthcare organization (******.com.se) according to an unverified extortion listing.
AIOn Ransomware.live, threat actor Section9 claims to have breached hospitality entity ****.com.mc; this listing is unverified.
AISection9 claims to have breached the Agriculture and Food Production organization *****.ind.br. This claim is unverified.
AISection9 claims to have breached a technology organization, according to an extortion-site listing on Ransomware.live.
AISection9 claims to have breached a Japanese technology company (domain redacted), per an extortion-site listing on Ransomware.live.
AISection9 claims to have listed data from *****.com.cn, a financial services firm, on Ransomware.live as an unverified claim.
AISection9 listed an unverified claim of attacking a Financial Services entity (******.net.br) on its extortion site, per Ransomware.live.
AISection9 claims to have listed an organization from ********.com.br on their extortion site, as per Ransomware.live; this claim is unverified.