Arcus Media is a ransomware-as-a-service group that emerged in May 2024, employing double extortion with ChaCha20 + RSA-2048 encryption and recruiting affiliates via a referral-based vetting process, claiming 50+ victims across manufacturing, healthcare, retail, and business services globally.
Genera un perfil del actor con IA (defensivo) cuando lo pidas.
Este grupo no tiene TTPs curadas. Puedes generar un mapeo MITRE ESTIMADO por IA (no confirmado) a partir de su descripción/notas, solo cuando lo pidas.
Firma de detección defensiva para este grupo (úsala en tu EDR/SIEM). Fuente: ransomware.live.
/*
arcusmedia ransomware
*/
rule arcusmedia_Ransomnote
{
meta:
author = "ransomware.live"
family = "ransomware.arcusmedia"
description = "Detects arcusmedia ransomware ransom note or artifact"
date = "2026-05-04"
severity = 7
score = 70
strings:
$name1 = "arcusmedia" ascii nocase
$name2 = "ARCUSMEDIA" ascii
$onion = "arcusmedia.onion" ascii nocase
condition:
any of them
}
Days06Hours23Minutes44442222Seconds33331111 ebfarmaceutica.com.br EB Farmacêutica operates in the distribution of manufactured medicine…
Days06Hours23Minutes39Secondes43 Subs Corp S.A.S. is a company in Colombia, with a head office in Barranquilla. The enterpr…
| Organización | País | Sector | Grupo | Descubierta |
|---|---|---|---|---|
| EB Farmacutica | BR | Healthcare | — | 12 ago 2025 |
| SubsCorp | CO | Manufacturing | — | 22 jul 2025 |
| RG Mexico | MX | Business Services | — | 5 jul 2025 |
| STANDBYTE | BR | Consumer Services | — | 30 may 2025 |
| Coopertruni | CO | Transportation/Logistics | — | 19 mar 2025 |
| HYPERNOVA TELECOM | BR | Telecommunication | — | 12 mar 2025 |
| Itapeseg | BR | Manufacturing | — | 3 mar 2025 |
| ICO | BR | Consumer Services | — | 3 mar 2025 |
| Eascon | BR | Business Services | — | 1 feb 2025 |
| Utilissimo Transportes | BR | Transportation/Logistics | — | 1 feb 2025 |
| Technico | BR | Manufacturing | — | 1 feb 2025 |
| Enge Ilha Construção | BR | Business Services | — | 29 dic 2024 |
| Engenet Informatica | BR | Technology | — | 29 dic 2024 |
| IT Networks | MX | Technology | — | 21 nov 2024 |
| Petropolis Pet Resort | BR | Business Services | — | 20 oct 2024 |
| Vasesa | MX | Not Found | — | 20 oct 2024 |
| Country Club El Bosque | CL | Hospitality and Tourism | — | 20 oct 2024 |
| Frigocenter | BR | Agriculture and Food Production | — | 24 sept 2024 |
| Solutii Sistemas | BR | Technology | — | 24 sept 2024 |
| Like Family’s | PR | Healthcare | — | 15 sept 2024 |
| Franja IT Integradores de Tecnología | CO | Technology | — | 4 jun 2024 |
| Duque Saldarriaga | CO | Business Services | — | 4 jun 2024 |
| Colégio Nova Dimensão | BR | Education | — | 18 may 2024 |
| BRAZIL GOV | BR | Public Sector | — | 15 may 2024 |
| Braz Assessoria Contábil | BR | Business Services | — | 15 may 2024 |
| Thibabem Atacadista | BR | Business Services | — | 15 may 2024 |
| Cusat | AR | Technology | — | 15 may 2024 |
| Frigrífico Boa Carne | BR | Agriculture and Food Production | — | 15 may 2024 |
| GOLD RH S.A.S | CO | Manufacturing | — | 15 may 2024 |
| Grupo SASMET | BR | Healthcare | — | 15 may 2024 |
Las direcciones de los sitios de filtración (.onion) se conocen pero no se publican ni se enlazan. Solo se muestran metadatos públicos. ética
rgmexico.com.mx RG Mexico, 30 years of providing peace of mind and security in: We have a s…
standbyte.com.br A Standbyte Computer it is an electronics store located in the center of L…
Days06Hours22222222Minutes44448888Seconds22224545 www.coopertruni.com.br Cooperativa dos Transportadores Unidos Ltda – COOPERTRUNI is a…
Days06Hours23Minutes33332222Seconds33336767 www.hypernovatelecom.com.br You know that nowadays the internet is no longer a luxury, but …