Presunta extorsión de Brain Cipher contra Tiendas Macuto con más de 300 GB alegados

What this source supports

• Ransomware.live records tiendasmacuto.com as claimed by BrainCipher on 17 August 2024
• the preserved actor-site screenshot visibly states Over 300gb of data stolen and displays a countdown
• the screenshot displays apparent internal correspondence, payment records and identity-document images
• the artifact proves the displayed claim and apparent samples, not their authenticity, provenance, total volume, encryption or successful intrusion

Evidence limits

The captured leak page is actor-controlled. The sample documents, asserted 300 GB volume, access method and underlying compromise were not independently authenticated.

Relevance to this case

Strongest preserved target-specific artifact for the existence and date of the public extortion claim.

What this source supports

• record 16925 lists tiendasmacuto.com, BrainCipher, Venezuela and Retail (distribution)
• the table timestamp is 17 August 2024 at 18:56
• the row corroborates monitoring of the public listing but supplies no proof of intrusion, volume, encryption or victim confirmation

Evidence limits

A tracker observation may derive from the same actor publication and is not independent forensic corroboration.

Relevance to this case

Independent monitoring provenance for the listing identity and timestamp.

What this source supports

• page 7 lists tiendasmacuto.com, BrainCipher, Commerce and Venezuela
• the report covers 15 through 22 August 2024
• the report does not state 300 GB, encryption, victim confirmation, access vector or operational effect

Evidence limits

Vendor weekly compilation; it likely depends on public ransomware monitoring and provides no incident-level validation.

Relevance to this case

Contemporaneous secondary corroboration that the target appeared in monitoring during the correct week.

What this source supports

• states that Brain Cipher claimed Tiendas Macuto and asserted theft of 300 GB with publication in 22–23 days
• says the attackers supplied proof through screenshots on the dark web
• its Tiendas-specific section does not itself display a corresponding screenshot
• supports reporting of the claim, not validation of the data, volume or compromise

Evidence limits

Tracker-style secondary report derived from actor material; no victim or forensic confirmation.

Relevance to this case

Detailed secondary account of the 300 GB and deadline claims, with explicit limitations.

What this source supports

• the live table lists 17/08/2024, Brain Cipher, Tiendas Macuto, VE and CRF4
• the page title and publication metadata say its period ended 6 August, before the target entry
• the page was modified on 11 September and contains entries through 20 August
• it supplies tracker context but no reliable contemporaneous publication date or independent incident proof

Evidence limits

The live page was overwritten or expanded after its nominal period; its 6 August metadata cannot date a 17 August target row.

Relevance to this case

Later tracker corroboration of the listing only; not a source for incident timing or technical facts.

What this source supports

• the page title frames the item as a CIAC alert that Brain Cipher claimed an attack against Tiendas Macuto
• the substantive body, exact date and target-specific attachment were not visibly available
• the exposed image is a generic cybersecurity banner and does not evidence the incident

Evidence limits

Login-gated/unavailable post body; neither reachability nor the indexed title is accepted as proof of its claims.

Relevance to this case

Low-confidence context only; does not establish compromise, ransomware execution, data theft or impact.