Ransomware Group: CIPHBIT

VICTIM NAME: António Belém & António Gonçalve

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the CIPHBIT Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

On September 24, 2025, a ransomware leak page attributed to the threat actor group ciphbit published information concerning the victim António Belém & António Gonçalve. The leak entry does not disclose the victim’s industry. The available data treat the key_date as the post date since there is no separate compromise date provided. The page includes a claim URL, suggesting the attackers provide a link to additional ransom-related details, but no ransom amount is stated in the metadata. The entry shows no images or downloadable files associated with it.

Metadata indicates there are no screenshots or images (images_count = 0) and no downloadable content (downloads_present = false). The leak is attributed to the group ciphbit, and no additional victims or company names are listed beyond António Belém & António Gonçalve. The presence of a claim URL is typical for ransomware leak posts, but the data here does not disclose any specific ransom demand or the type of data allegedly affected.