Ransomware Group: BABUK

VICTIM NAME: www[.]constelacion[.]com[.]sv

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the BABUK Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page associated with the organization identified as a Savings and Credit Society in El Salvador highlights significant concerns regarding compromised data. The attackers allege possession of over 470 GB of sensitive data, including client information. A notable message directed at the organization mentions that they were given the opportunity to negotiate but failed to respond. The attackers emphasize that they are preparing to release a full leak of the data shortly, signifying a serious threat to the organization’s integrity and the privacy of its clients.

The page contains various messages from the attackers, some of which include references to the organization’s operational structure and its regulatory frameworks. They also falsely assure that customer data is safe, disputing this claim by stating that internal communications and proof of compromised data will soon be shared publicly. Additionally, the attackers express frustration that the victim is attempting to rebuild their infrastructure instead of negotiating. There are no downloadable links present on the page, and it is devoid of any images. Reports indicate that the organization should be more diligent in data security protocols to prevent future breaches.