Ransomware Group: BABUK2

VICTIM NAME: India’s telecommunication network

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the BABUK2 Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page pertaining to a major telecommunications company in India has been discovered on March 12, 2025. The content of the leak indicates a significant breach affecting India’s telecommunication network, which may put sensitive information at risk. The group behind the attack is identified as ‘babuk2’. While specific details regarding the compromise of data are unspecified, the nature of the leak suggests that critical infrastructure may have been targeted, affecting a wide range of operations within the telecommunication sector across the country.

The leak page includes a screenshot that presumably presents visual information about the breach, although details regarding the composition of these images have not been disclosed to maintain confidentiality. Given the potential implications of this leak for both consumers and industry stakeholders, the situation demands attention from cybersecurity experts and regulatory bodies. The published date of the leak coincides with the discovery date, reinforcing the urgency of addressing vulnerabilities within the telecommunications infrastructure in India.