Cyber Incident Victim: Unidas
Date:
Apr 2025
Location:
Brazil
Summary
A cyber attack compromised Unidas' digital infrastructure, impacting over 250 devices including televisions, IoT devices, and servers. The Turkish-speaking hacktivist group NexusQassamy claimed responsibility, displaying a political message accusing Israel of genocide in Gaza on the company's TVs. This incident marks the second known attack targeting this specific area of the victim's systems. An anonymous source within the company criticized the lack of a dedicated security team, preparedness, and management concern regarding cybersecurity, stating barriers against attacks were non-existent.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On April 1, 2025, a cyberattack impacted the television communication system of Unidas, a major Brazilian mobility company within the Brookfield group specializing in vehicle management and leasing. The attack affected over 250 devices, including televisions, IoT devices, and servers, marking the second known cyber incident targeting Unidas's digital assets in this specific area. The hacktivist group NexusQassamy, communicating in Turkish, claimed responsibility for the breach. Their attack involved compromising Unidas's televisions to display a politically charged message accusing the Israeli government of genocide in Gaza. This message featured images of an injured baby, an injured civilian, and the Israeli Prime Minister labeled "baby killer" in the top third. The lower two-thirds displayed the title "HACKED BY NEXUSQASSAMY" followed by text stating "Gaza is being subject to genocide by Israel, babies are dying, no one is doing anything, when will the world wake up, babies are dying." NexusQassamy had previously announced their operations on Telegram on February 19th, 2025, with a post expressing ideological motives centered on the rise of Islam and Sharia law globally.
Unidas, through its communications management, did not deny the incident occurred but declined to comment on it publicly. An anonymous message received by CISO Advisor provided internal criticism regarding Unidas's cybersecurity posture, stating the company lacked a dedicated security team and that the board of directors showed no concern for cybersecurity. The message lamented that this was the second time the company had been breached and emphasized a lack of capability to respond to cyberattacks or implement defensive barriers, concluding that security held no value for the directors. The attack directly disrupted Unidas's internal communication systems via the compromised TVs and exposed the company to reputational damage through the unauthorized display of graphic political content. The scope of the breach extended beyond televisions to include IoT devices and servers, indicating a potentially significant compromise of the affected network segment.