Ransomware Group: LYNX

VICTIM NAME: ranhillbersekutu[.]com[.]my

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the LYNX Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page related to Ranhill Bersekutu highlights a breach affecting the company, a prominent Malaysian engineering firm active in the energy sector. Established in 1973, Ranhill Bersekutu, along with Ranhill Consulting, has a long history of involvement in various nation-building projects across multiple sectors including transportation, power, water and wastewater management, and sustainable design. They have executed projects in over 20 countries, demonstrating a robust international presence particularly in Asia, the Middle East, and Africa. The breach was discovered on February 18, 2025, but specific compromise details are not disclosed in the available information.

The page contains visuals such as a screenshot representing aspects of the data leak, signifying the seriousness of the breach. However, no personally identifiable information has been specified in the extracted data, and there appears to be no user or employee data affected based on the infostealer’s report. The leak has the potential to impact Ranhill’s operations due to its significant role in the energy industry and involvement in critical infrastructure projects. Furthermore, it is implied that recovery from this breach will be essential for maintaining stakeholder trust and ensuring continued project execution in the region.