Ransomware Group: FUNKSEC

VICTIM NAME: funkforum

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the FUNKSEC Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page associated with the victim, referred to as “Funkforum,” is linked to a radio network that connects over 40 regional radio stations catering to German-speaking communities in Eastern Europe. The network primarily serves audiences in Romania, Serbia, and Hungary, facilitating the sharing of news, cultural experiences, and events among journalists and broadcasters. This initiative not only aims to promote cultural exchanges but also reinforces the heritage, language, and identity of these populations. The content on the leak page appears to emphasize the significance of communication and cross-cultural relationships within these communities.

Details about the compromised information remain unspecified, but the leak page indicates that a group called “funksec” is involved. The release is attributed to a recent discovery on January 17, 2025. While specific sensitive details about the data leaked have not been disclosed, the presence of a screenshot suggests that visual evidence of the compromise may exist, although explicit images or sensitive content are not described in detail. The page notes no specific activities linked to the victim and does not provide further context about the nature or scale of the breach.