Ransomware Group: INCRANSOM

VICTIM NAME: Netstar_South_Africa

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the INCRANSOM Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The leak page centers on the victim Netstar_South_Africa, a technology-sector entity. It states that Netstar_South_Africa pioneered stolen vehicle tracking and recovery in South Africa in 1994 and continues to offer tracking and fleet management solutions that matter. The post is dated 2025-08-20 10:00:00 (post date), and page metadata includes a revenue figure of 148.3M$. There is no explicit ransom amount shown in the available data, and no downloadable files are listed on the page.

The page features seven images described in the metadata as screenshots. These images are referenced via onion-hosted addresses (defanged for public rendering) and the post notes the presence of at least one claim URL, consistent with a ransomware leak narrative. The body excerpt reiterates Netstar_South_Africa’s longstanding role in stolen vehicle tracking and fleet management, underscoring the victim’s market position.

Overall, the publicly visible content does not specify encryption or data-exfiltration details. There is no shown ransom figure and no direct downloads on the page. The post date is explicitly listed as 2025-08-20 10:00:00, and while Netstar_South_Africa is retained as the victim in this report, other company names appearing in the text are not summarized here.