Bitz Softwares Listed by apos Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Ransomware groups continue to target software firms and other technology providers, often claiming to have stolen internal material and threatening to publish it if ransoms are unpaid. In this climate, listings on criminal leak sites have become a common way for attackers to pressure organisations and signal their activity to the wider public. One such listing, reported on 29 April 2024, concerns Bitz Softwares and the group known as apos.

Public detail on the incident remains limited. What is known is that apos has claimed responsibility for a ransomware attack in which internal files were exfiltrated from Bitz Softwares, a Brazilian company operating at bitzsoftwares.com.br. The number of people affected is unknown, and the group has not published the material according to available reports. The listing itself is an unverified claim by the attackers.

What happened

According to the reported summary of the listing, apos stated that it had conducted a ransomware attack against Bitz Softwares and exfiltrated internal files. The material is described as including source code, with a claimed volume of 18.1 MB. The group indicated that the data had not been published. The organisation is associated with Brazil and the domain bitzsoftwares.com.br. No further technical details of the intrusion method, the precise date of the attack, or confirmation from the company itself appear in the public record. The number of individuals whose information may have been involved is listed as unknown. All specifics beyond the group’s own claim remain undisclosed.

Who is apos?

apos is a ransomware group that operates in the double-extortion model common among such actors: encrypting systems while also claiming to steal data and threatening to leak it on a dedicated site if payment is not made. Like other groups of this type, it publicises victim names and purported data samples or volumes to increase pressure. Public reporting has associated apos with listings of organisations across various sectors, though the group’s claims are not independently verified unless a victim or third party confirms them. In this case, the listing of Bitz Softwares is presented solely as the group’s assertion; no independent confirmation of the breach or of the claimed contents is contained in the available facts.

Bitz Softwares and its sector

Bitz Softwares is a software company based in Brazil. Organisations of this kind typically develop, maintain and support software products or services for clients. They commonly hold source code repositories, internal development documentation, configuration files, and business records. Because software firms often serve other businesses or public-sector clients, a compromise can have secondary effects beyond the primary organisation. A ransomware claim against such a firm is consequential because source code and internal files can reveal proprietary logic, security practices or operational details that competitors or further attackers might exploit. The limited public information does not establish the full scope of Bitz Softwares’ operations or client base, only that it has been named by apos in connection with an alleged ransomware incident.

What was likely exposed

The facts state that internal files were exfiltrated in a ransomware attack and that the group’s listing references source code, with a claimed size of 18.1 MB and a note that the material was not published. Exact contents beyond that description are not disclosed. Software companies ordinarily store source code, build scripts, internal documentation, employee or contractor records, and sometimes customer or partner data. Whether any of those categories beyond the claimed source code were present in the alleged 18.1 MB set cannot be confirmed from the public record. Readers should treat the group’s description as an unverified claim rather than established fact.

What's at stake

For individuals connected to Bitz Softwares—employees, contractors or clients—the primary risks centre on any personal or contact information that may have been present in the internal files, as well as the possibility that proprietary code or credentials could later be misused. For the organisation, exposure of source code can undermine competitive advantage, reveal vulnerabilities in its products, and create ongoing operational and reputational costs. Because the data have not been published according to the listing, the immediate public dissemination risk appears limited, yet the material remains under the control of the attackers unless recovered or proven destroyed. The unknown number of affected people means the scale of personal impact cannot yet be assessed.

Were you affected?

If you have a relationship with Bitz Softwares—as an employee, contractor, customer or partner—monitor official communications from the company for any confirmation or guidance. Change passwords associated with company systems, enable multi-factor authentication where available, and remain alert to phishing or social-engineering attempts that might reference the incident. Because the number of people affected is unknown and the precise data types beyond internal files and claimed source code are unconfirmed, treat any notification with care and verify it through trusted channels. Readers can also run a free exposure scan of their email address to check whether their information has already appeared in known breach data sets elsewhere.

AICompiled with AI assistance from public sources and published under our editorial standards.