APT73 Claims Ransomware Campaign Targeted Brazil’s gov.br Platform

Summary
A ransomware.live monitoring post attributes an unconfirmed ransomware campaign targeting Brazil’s gov[.]br government platform to APT73, citing the actor’s leak-site claim.
Key points
- The monitoring post identifies Brazil’s gov[.]br platform as the named victim and APT73 as the claimed actor.
- The post attributes the claim to an APT73 leak-site page.
- The article says the claim is unconfirmed; it provides no independent evidence of disruption or other impact.
Article Details
- Victim
- gov.br
- Victim Domain
- gov.br
- Claim Date
- 2026-06-23
- Encryption Status
- Unknown; not confirmed by the source.
- Exfiltration Status
- Unknown; not confirmed by the source.
- Leak Status
- No leak or publication status reported; the article says the information is based on public claims by the ransomware group and cannot be confirmed.
