The ransomware claim implicates the threat actor Everest in targeting Petrobras, a state-owned Brazilian multinational involved in the oil, gas, and energy sector, as well as SAExploration, an American company specializing in seismic data acquisition. The attack has impacted Brazil.
Incident Details
- Victim: Petrobras / SAExploration
- Country: BR
- Actor: everest
- Source: http://ransomocmou6mnbquqz44ewosbkjk3o5qjsl3orawojexfook2j7esad.onion/news/petrobras/
- Discovered: 2025-11-17 16:13:25.437331
- Published: 2025-11-17 16:13:07.818832
Information
- Petrobras is a state-owned Brazilian multinational corporation involved in the oil, gas, and energy industry.
- The company specializes in exploration, production, and distribution of oil, gas, and derivative products.
- SAExploration is an American energy company providing seismic data acquisition services for the oil and gas industry.
- They focus on deep water ocean bottom projects and challenging land operations.
Disclaimer: This post is based on public claims made by the ransomware group "everest". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.