Ransomware Group: FUNKSEC

VICTIM NAME: maxprofit[.]mcode[.]me

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the FUNKSEC Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page associated with the victim highlights the selling of admin access to the domain maxprofit.mcode.me. The attackers indicate that they are offering this access for a price of $10,000, specifically linked to an event termed as “funknight.” This listing appears to be a direct attempt to exploit the situation for financial gain, as the page emphasizes immediate availability of the access for interested buyers. The attackers also make a statement regarding exclusivity to the first buyer, suggesting a competitive atmosphere among potential purchasers.

The page is branded with © 2024 Funksec ransomware, indicating the operatives behind this cyber extortion attempt. It also includes a session identifier, which seems to be a unique identifier for the transaction or offer. Additionally, the leak features various images – a total of seven – although their contents are not specified in detail. The absence of download links implies that no data leaks have been provided directly to the public, focusing instead on the admin access sale. Overall, this leak page reveals a typical approach by ransomware groups to monetize their illicit access to compromised systems.