Ransomware Group: BABUK

VICTIM NAME: abd-ong[.]org

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the BABUK Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page pertains to the non-profit organization, ABD (Asociación Bienestar y Desarrollo), which operates in Spain. The organization has an extensive history, having been established in 1980, and focuses on various social issues such as reducing inequalities, supporting mental health, and assisting children and families. The page includes details about data allegedly exfiltrated from the organization. According to the content, the data includes sensitive information such as user names and contact details, though specific identifiers have been sanitized for security compliance. It appears the intruders are attempting to extort the organization with a demand for payment to prevent the public disclosure of this information.

The document asserts the existence of approximately 3GB of SQL data and 1GB of PDFs, claiming this information is vital for securing the organization’s operations and protecting its users. The ransom is set at $5,000 USD, with a stated time limit for payment until January 1, 2025. Should the organization fail to comply, the threat indicates that the information will be made public, potentially compromising their operations and the privacy of individuals associated with ABD. While the page does not contain any download links or images, it does serve as a stark warning regarding the cybersecurity risks faced by non-profit organizations in managing and protecting sensitive data.