In Brazil, ransomware claims targeting Petrosul Distribuidora, Transportadora e Comércio de Combustíveis Ltda. highlight disruption at the fuel storage terminal operator founded in 1994 and operating since 2015 with real-time control and modern infrastructure. Threat actor dragonforce is reported to be responsible for the attack impacting critical operations across Petrosul’s terminals in Sorocaba, Paulínia, and Senador Canedo. #Brazil
Incident Details
- Victim: Petrosul Distribuidora, Transportadora e Com,ércio de Combustíveis Ltda.
- Sector: Energy & Utilities
- Country: BR
- Actor: dragonforce
- Source: http://xjhmtitnrdrgzw4vmsghirdoo2fk35a3tzj4enlmah4pvehdspydsiyd.onion/blog/?post_uuid=da72940b-1f4b-409b-93b0-559587b4334c
- Discovered: 2026-10-07T23:29:33.604203+00:00
- Published: 2026-10-07T23:10:16.514068+00:00
Information
- Founded in 1994, the company has specialized in fuel storage terminal operations since 2015.
- It offers modern infrastructure, real-time control, and efficient management to support high-quality service.
- Its main clients are businesses seeking reliable fuel storage solutions.
- The company operates terminals in Sorocaba, Paulínia, and Senador Canedo.

Disclaimer: This post is based on public claims made by the ransomware group "dragonforce". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.