Ransomware Group: APT73

VICTIM NAME: fol-23[.]fr

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the APT73 Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page pertains to a victim identified under the domain fol-23.fr, associated with the Federation of Secular Works of the Creuse in France. The organization reportedly brings together between 230 and 250 associations each year, although specific details about their operations were not disclosed in the leak. The webpage indicates that the information was discovered and published on January 17, 2025. The current status and implications of the information leak remain unspecified, but the page is linked to a notorious ransomware group known as apt73.

In addition to the primary information, the page includes a screenshot demonstrating the site’s internal documentation; however, no sensitive information such as employee names or third-party client details are presented. While the specific activities of the Federation are categorized as “Not Found,” it can be inferred that the leak could potentially impact their operations due to the nature of the group’s activities. There is no indication of leaked download links or unique identifiers present on the site. The visibility of the situation merits ongoing observation to assess any resultant consequences for the organization.