Latest Research on INC and The Gentlemen Ransomware: Exposed AI Infrastructure

RECEITA FEDERAL DO BRASIL Ransomware Attack

gov.brRansomed

emperadorGroup

BrazilCountry

Sep 23, 2026Discovered

Overview

View group profile

Domain

gov.br

Industry

Government & Defense

Country

Brazil

Discovered

about 1 month ago

Attack date

Sep 23, 2026

Confidence

100%

Severity

Medium

Status

Claimed

Threat group

emperador

Total victims

First seen

Aug 2026

Last seen

Oct 2026

Group status

active

Sophistication

Impact score

Threat level

4.1/10

Aggressiveness9/10

Lethality0.7/10

Criticality2.4/10

Status breakdown

Data Leaked7.2%6

Negotiating2.4%2

Claimed

this victim

90.4%75

Targeted sectors

Education Energy & Utilities Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Technology Transportation

Victim's position within group

Industry

Government & Defense

Known target sector

Country

Brazil

Frequently targeted country

Other victims

View all (83)

Same group · emperador

Group activity

Monthly attacks · emperador

total · avg 27.3/mo