Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Logo

Mutant

mutant.com.br
Group Thegentlemen
Discovered 2026-09-07 21:55 UTC
Est. attack date 2026-09-07
Country BR
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Description:

mutant.com.br zoominfo.com/c/mutant/452328184 Mutant is one of Latin America's largest CX & AI companies, founded in 2016 as a spin-off from Genesys Brazil, HQ'd in São Paulo with 4,000+ employees across 14 countries. Backed by Permira, GIC and TCV, its holding "Clash" raised $75M from BlackRock in 2025 for M&A and AI. It runs 3.5 billion AI-driven interactions per year for 100+ enterprise clients — including the world's largest corporate WhatsApp operation (Caixa) — with clients like Itaú, Vivo, Santander, Claro and iFood. Built through 8+ acquisitions (Interaxa, GRB, Intervalor...), it projects ~R$1B revenue in 2026 and pours R$100M+/year into its proprietary generative AI ecosystem (IAM/Xavier/PALI). Bottom line: the quiet AI-giant of Brazilian customer experience — "Artificial Intelligence, Human Experiences" — now repositioning as the enterprise AI-intelligence layer of LatAm.
Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 130

Third Party Employee Credentials: 51

External Attack Surface: 38

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • alt3.aspmx.l.google.com. Google Workspace
  • alt2.aspmx.l.google.com. Google Workspace
  • ms90560992.msv1.invalid.
  • aspmx.l.google.com. Google Workspace
  • alt1.aspmx.l.google.com. Google Workspace
  • alt4.aspmx.l.google.com. Google Workspace
TXT Records
  • atlassian-domain-verification=sAt/JpzsdyqHMgTvizn4ZtKrq3FXyTs7PQaQcuhfgqNCG5tUsYomYYFQ8ASmwO/V
  • v=spf1 include:_spf.google.com include:spf.actimo.com include:_spf.psm.knowbe4.com -all
  • MS=ms49956534
  • google-site-verification=o6H3Enz8PUFHPLh
  • google-site-verification=CwqbfWvimZi8828
  • _globalsign-domain-verification=W2YpyA0O9mxKBk6H7Q2MZ01zw1HhJnHgARb44bom3z
Cloud / SaaS Services Detected
Atlassian Global Sign KnowBe4 Microsoft 365

Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data. This platform indexes only publicly visible information posted by ransomware operators and open web sources without accessing or obtaining the underlying stolen content. The service is provided to support public awareness, legitimate research, and cyber-resilience. No stolen personal or confidential data is collected or distributed via this site.