Ransomware Group: KILLSEC

VICTIM NAME: moi[.]gov[.]ly

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the KILLSEC Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak involving the Ministry of Internal Affairs of Libya, identified as the victim in this case, was discovered on October 16, 2024. The leak indicates that the group known as “killsec” has compromised sensitive data related to the ministry. This organization, responsible for the country’s internal security and administration, operates from its headquarters in Tripoli. A screenshot of the leak page is available, which provides a visual representation of the leaked content. It is stated that there are multiple users, employees, and third-party entities that are potentially affected by this breach.

According to the information extracted from the leak page, the compromised database includes details about 11 employees, 14 users, and 4 associated third-party entities. Additionally, 4 URLs related to employees and 3 URLs corresponding to third parties have been identified, which likely points to further sensitive information that may be exposed. The riskiest aspect of this attack is the potential for misuse of the leaked data, which predominantly involves public sector operations within Libya.