Doommageddon is a ransomware group targeting healthcare, financial services, and retail sectors in Brazil and Paraguay.
Doommageddon is a criminal ransomware group targeting healthcare, financial services, and retail & e-commerce sectors in Brazil and Paraguay. They employ direct extortion and double extortion TTPs, exfiltrating sensitive data before encryption to pressure victims. Defenders should focus on robust network segmentation, anomalous data exfiltration monitoring, and timely patching to mitigate initial access vectors.
Direct Extortion Double Extortion
A double extortion tactic.
Brazil and Paraguay.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.