Ransomware Group: BABUK

VICTIM NAME: rtdc[.]gov[.]mn

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the BABUK Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The current ransomware leak page reveals information regarding access to the website rtdc.gov.mn. The leak indicates that this administrative access is being offered for sale, accompanied by sensitive data including important documents and email communications. The post has received notable attention, as evidenced by the reported views, stating that it has been seen 331 times. It is implied that the perpetrators are promoting access to this governmental entity and have set a price for it, indicating a severe compromise of security and potential misuse of the information for malicious purposes.

Notably, the leak page discusses the availability of certain internal documents and data related to rtdc.gov.mn at a stated price, although no specific download links are present according to the information extracted. The presence of an image suggests there may be visual evidence supporting the claims made in the post. The overall tone of the leak is confrontational, with references made to the government of Mongolia, illustrating the audacity of the threat actors. Such disclosures pose significant risks not only to the victims but also to the wider community, as they can lead to further attacks or exploitation if the information is genuine.