RANSOMWARE VICTIMMANUFACTURINGDUPLICATE CLAIM

grupoferrosider.com.br

grupoferrosider.com.br
lockbit5📍 Brazil (BR)📅 February 6, 2026
8
same group

Attack Intelligence

grupoferrosider.com.br was compromised in a ransomware attack attributed to lockbit5 in February 2026. The organization, operating in the Manufacturing sector in Brazil, was added to the group's data leak site as part of an extortion campaign.

lockbit5 operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Ferrosider Componentes is a leading provider of automotive parts and components designed for the met...

Additional Details

Other Victims — lockbit5 (8)

Quick Facts

CountryBrazil (BR)
SectorManufacturing
Attack DateFeb 6, 2026
Domaingrupoferrosider.com.br
Intel Sourceransomware.live
StatusDUPLICATE CLAIM

Threat Group

lockbit5
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.