Ransomware Group: BABUK

VICTIM NAME: Kurosu & Co[.]SA – kurosu[.]com[.]py

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the BABUK Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The leak page for Kurosu & Co.SA, an established company in Paraguay’s agricultural sector since 1968, provides an overview of its historical and operational achievements. The company, which transitioned from Agro Servi Sociedad de Responsibilidad Ltda, operates from Encarnación, Itapúa, and boasts a legacy of over 55 years in delivering agricultural solutions. The message highlights Kurosu & Co.SA’s commitment to operational excellence, strong supplier relationships, and adherence to local and international compliance standards. The information presented includes a call to attention regarding the recent data breach incident that has resulted in the exposure of sensitive company information.

In addition to detailing the history and operational context of Kurosu & Co.SA, the leak page indicates that various types of sensitive data have been compromised. This includes complete databases, user information, source codes, communication logs, and access credentials. Notably, the company has a sustained relationship with notable brands in agricultural machinery, including its significant association with JOHN DEERE. This raises concerns regarding the impact of the data breach on its clients and stakeholders, given the extensive nature of the compromised data. The page also features a singular image related to the leak but does not provide any download links for additional content.