Ransomware Group: DEVMAN

VICTIM NAME: TBD HONK KONG

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the DEVMAN Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page indicates that an incident was discovered on May 19, 2025, affecting an unnamed victim in Hong Kong. The attack involved total encryption of available files, as highlighted by the statement “ALL FILES ENCRYPTED.” Despite the lack of detailed activity or company information, the leak suggests a ransomware operation targeting files stored on the compromised system.

The page does not provide specific details about the nature of the victim’s activities or the precise data compromised. It appears the attack was significant enough to warrant a public leak, possibly to pressure the victim into paying a ransom. No available screenshots or visual evidence are provided, and there are no direct download links or leaked data shared on the page. The incident emphasizes the increasing sophistication of ransomware groups operating globally, with this case involving encryption affecting potentially critical or sensitive files of an undisclosed organization in Hong Kong.