The tengu threat actor has targeted UniCursos in Brazil, specifically impacting their operations through a ransomware attack. The incident has affected the institution’s ability to provide preparation courses for public sector exams in São José dos Campos and nearby regions. #Brazil
Incident Details
- Victim: UniCursos, Brazil
- Country: BR
- Actor: tengu
- Source: http://longcc4fqrfcqt5lzceutylaxir6h66fp6df3oin6mvwvz6pfdbxc6qd.onion/blog/15f2b93e929d7acc1e24dfd6b25ab9f5c7144e70d305869c0d3685e63525bf40/
- Discovered: 2025-10-23 19:15:52.543200
- Published: 2025-10-23 19:15:37.486638
Information
- The ransomware attack targeted UniCursos, located in São José dos Campos, Brazil.
- The threat actor responsible for the attack is tengu.
- UniCursos specializes in offering preparation courses for public sector exams.
- The institution serves students in São José dos Campos and the surrounding areas in the state of São Paulo.
Disclaimer: This post is based on public claims made by the ransomware group "tengu". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.