Ransomware Group: CLOAK

VICTIM NAME: oa*************[.]us

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the CLOAK Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page associated with the group known as “cloak” focuses on the victim identified by the title “oa*************.us”. The available details indicate that the post was published on February 20, 2025, and was discovered on the same date. Unfortunately, no other information regarding the victim’s activity, country, or description has been provided, making it difficult to gain insights into the nature and extent of the incident. This lack of detail suggests a potential focus on maintaining confidentiality or the ongoing development of the situation surrounding the breach.

At this time, there are no additional elements such as screenshots, links, or other forms of extracted information available from the leak. The absence of specific data raises questions about the potential breadth of the compromise and the nature of the security incident experienced by the victim. Further monitoring may be necessary to uncover more substantive details as they develop, especially concerning the impact on the victim and measures taken to address the situation.