The ransomware claim involves the victim www.mercantetubos.com.br, attributed to the threat actor alphalocker, targeting Mangueira Indústria e Comércio de Tubos e Aços Especiais Ltda., a Brazilian company founded in 1972 that specializes in importing and distributing DIN ST 52 steel mechanical tubes. The attack impacts Brazil.
Incident Details
- Victim: www.mercantetubos.com.br
- Country: BR
- Actor: alphalocker
- Source: http://mydatae2d63il5oaxxangwnid5loq2qmtsol2ozr6vtb7yfm5ypzo6id.onion/blog_1-25
- Discovered: 2025-10-13 19:48:39.336388
- Published: 2025-10-13 19:48:19.770356
Information
- The victim is www.mercantetubos.com.br, located in Brazil.
- The ransomware actor is Alphalocker.
- Mangueira Indústria e Comércio de Tubos e Aços Especiais Ltda. was established on October 3, 1972.
- Its primary objective was to import DIN ST 52 steel mechanical tubes.
- Subsequently, Mannesmann S.A. began industrializing this product line.
- Mangueira obtained a distribution quota for DIN ST 52 mechanical tubes amid this development.

Disclaimer: This post is based on public claims made by the ransomware group "alphalocker". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.