Ransomware Group: FUNKSEC

VICTIM NAME: 2sign[.]co[.]il

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the FUNKSEC Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page associated with the victim, referred to as 2Sign, indicates that the platform was targeted by Funksec ransomware in 2024. The attackers claim to have compromised the website, extracting sensitive data and invoices, and threatening to destroy the company’s administrative panel. This incident highlights the ongoing risks faced by digital service providers, including those involved in document management and digital signatures.

2Sign is described as an Israeli digital signature platform that provides users with secure online document signing capabilities. It features a user-friendly interface designed for creating and managing digital forms, making remote signature processes efficient. The leak page asserts that the attackers have gained unauthorized access to significant amounts of data, including invoices, raising concerns about potential data exposure following this breach. Additionally, the page includes three images related to the breach, and there are download links available, though no specific details regarding their content are provided.