Ransom! ws.com.br (JUN-2026)
In a ransomware incident impacting ws.com.br (BR), threat actor threeam targeted the Brazilian operations and business services provider, WS Group Brasil, which delivers logistics, technical support, contract administration, and labor-intensive services for government, institutional, and commercial clients. The attack resulted in disruption to the victim’s systems and services in #Brazil

Incident Details

  • Victim: ws.com.br
  • Sector: Business Services
  • Country: BR
  • Actor: threeam
  • Source: http://threeamkelxicjsaf2czjyz2lc4q3ngqkxhhlexyfcp2o6raw4rphyad.onion/detail/87saj8y4w6unocty1j0h3ecdv0afsk
  • Discovered: 2026-06-12T20:03:53.992970+00:00
  • Published: 2026-06-12T20:03:26.796940+00:00

Information

  • WS Group Brasil is a Brazilian operations and business services provider.
  • It is engaged in logistics, technical support, contract administration, and labor-intensive service delivery.
  • The company serves government, institutional, and commercial clients.

Disclaimer: This post is based on public claims made by the ransomware group "threeam". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.

monitored by: ransomware.live