Ransomware needs a way in. Stolen credentials are the cheapest one.

Sample_Forestal Atlántico Sur Ransomware Attack

Ransomware victimRansomed

shadowbyt3$Group

UruguayCountry

Apr 9, 2026Discovered

Overview

View group profile

Country

Uruguay

Discovered

5 months ago

Confidence

70%

Severity

Medium

Status

Claimed

Threat group

shadowbyt3$

Total victims

First seen

Feb 2026

Last seen

Sep 2026

Group status

active

Sophistication

Impact score

Threat level

4.4/10

Aggressiveness7/10

Lethality1.4/10

Criticality4.6/10

Status breakdown

Data Leaked29.3%12

Negotiating2.4%1

Claimed

this victim

68.3%28

Targeted sectors

Education Financial Services Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology

Victim's position within group

Country

Uruguay

Frequently targeted country

Other victims

View all (41)

Same group · shadowbyt3$

HandyTrac Greystar AZ WARNING
United States
Claimed
HandyTrac
United States
Data Leaked
University Of Georgia
United States
Claimed
John Engel Team
United States
Data Leaked
Ben Leeds Properties WARNING
United States
Claimed
Ben Leeds Properties
United Kingdom
Data Leaked

Group activity

Monthly attacks · shadowbyt3$

total · avg 6.8/mo