Ransomware Group: CLOAK

VICTIM NAME: ge*******[.]com

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the CLOAK Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page associated with the group identified as “cloak” presents concerning information about a victim linked to the domain represented as “ge*******.com.” While the specific activity and country of the victim have not been disclosed clearly in the available data, the description indicates that the leak pertains to a dataset totaling 271GB with no public views reported at the time of discovery. The page was published on January 21, 2025, suggesting that the information is relatively recent and has yet to attract attention from external sources.

Despite the absence of detailed descriptions of the nature of the data compromised, the mention of a considerable data volume raises potential concerns regarding the sensitive nature of the information involved. The leak page does not currently provide download links or visible screenshots, indicating that the contents may be restricted or private. Given the absence of specified activities and geographical context, additional inquiries could be necessary to comprehend the implications of this breach fully.