N4ughtysecTU

🇧🇷Brazil-attributed

campaigns

aliases

Last seen:Mar 17, 2026

Intelligence Profile

In March 2022, a hacking group calling themselves N4ughtySecTU claimed to have breached TransUnion’s systems and threatened to leak four terabytes of data if the credit bureau didn’t pay a $15-million (R242-million) ransom.

Threat Analysis

N4ughtysecTU is a known-sophistication threat actor attributed to Brazil, engaged in cyber operations with a primary motivation of unknown activity patterns.

Known Campaigns

N4ughtysecTU — Active Operations March 2026

N4ughtysecTU is a unknown-motivation threat actor attributed to BR. In March 2022, a hacking group calling themselves N4ughtySecTU claimed to have breached TransUnion’s systems and threatened to leak four terabytes of data if the credit bureau didn’t pay a $15-million (R242-million) ransom....

ACTIVEMEDIUM2026

External References

→https://mybroadband.co.za/news/security/438982-how-bank-customers-can-protect-themselves-after-hackers-leak-transunion-data.html

→https://cisoseries.com/cyber-security-headlines-march-21-2022/

→https://mybroadband.co.za/news/security/443090-cybercriminals-love-south-africa-study.html

Quick Facts

TypeAPT / Threat Group

Origin🇧🇷 Brazil

Aliases1

SourceMalpedia

Also Known As

N4ughtysecTU

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search N4ughtysecTU