Ransomware Group: APT73

VICTIM NAME: bankily[.]mr

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the APT73 Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page related to the financial services entity, identified as BANKILY, has disclosed potentially sensitive information. As reported, this mobile banking product, developed by Banque Populaire de Mauritanie, has experienced a data breach. The leak indicates that employee names and associated data may have been compromised, including administrator credentials. However, specific details of the leaked data remain unspecified to prevent any breaches of privacy. The breach was discovered and publicly noted on December 9, 2024, aligning with the published leak date of the same day.

The leak page features general descriptions outlining the nature of the business, focusing on its mobile banking solutions. It also suggests that no clear user or third-party data is available for extraction at this time. The website leaks are hosted on a dark web URL, which refrains from directly naming affiliated individuals or providing explicit data breaches. Furthermore, a screenshot reflecting the contents of the ransom note is present, although it does not depict specific details. Observations indicate that the compromised data potentially poses risks to the organization’s integrity and trustworthiness within the financial sector.