Ransomware Group: APT73

VICTIM NAME: bankily[.]mr SOLD

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the APT73 Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page concerning BANKILY, a mobile banking product from the Banque Populaire de Mauritanie, reveals that sensitive employee data has been compromised. The leaked information includes personal data such as employee names and other critical operational details, including administrative credentials. The compromise was noted on December 12, 2024. This event underscores substantial risks associated with mobile banking services, particularly around data protection and vulnerability management within financial institutions. The page was published on the same date, confirming the timing of the data breach announcement.

The leak occurs within a context where the financial services sector remains a prime target for cybercriminal groups, such as the noted group ‘apt73.’ The page indicates that there is notable concern for individuals whose data may have been exposed through this incident. Screenshots of the leak, visible on the webpage, illustrate internal documents—hereby indicating the level of access that has been gained by the attackers. Additionally, it is worth noting that discussions regarding the leak may hint at potential ransom demands or negotiation proposals, although the specific details of these negotiations are not publicly accessible.