The ransomware incident affected coemi.com.br, a Brazilian real estate company (Coemi Im,óveis) based in Brasília, Distrito Federal, Brazil, and was attributed to the krybit threat actor. The attack resulted in encrypted data and disrupted operations for the victim in #Brazil.
Incident Details
- Victim: coemi.com.br
- Sector: Not Found
- Country: BR
- Actor: krybit
- Source: http://krybitqsdzwmhnitvwuhvsntfgf2wrhxveyxroxpc44c6gkft2cqldyd.onion/blog/8b5ee3a5113c9b494db51ddb8c9b75acbcbcddf655f691ea72c8771f8cbadce6/
- Discovered: 2026-06-19T21:00:25.755625+00:00
- Published: 2026-06-19T20:59:51.766215+00:00
Information
- Coemi Imóveis is a Brazilian real estate company with 41 years of tradition in Brasília, Distrito Federal, Brazil.

Disclaimer: This post is based on public claims made by the ransomware group "krybit". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.