Ransomware Group: FUNKSEC

VICTIM NAME: tsag-agaar[.]gov[.]mn

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the FUNKSEC Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page associated with the victim, identified as Tsag-agaar.gov.mn, indicates a breach involving an agency responsible for meteorology and environmental data in Mongolia. The organization operates within the Transportation and Logistics sector and plays a vital role in providing crucial weather forecasts and climate data to support public and government decision-making. The leak reportedly involves 10 user accounts, although further details about additional employees or third-party involvement are unspecified. The data extraction occurred on December 31, 2024, and illustrates the potential risks related to government and environmental data security.

The leak page does not include screenshots or specific download links for the leaked data. However, it does indicate that the agency’s operational integrity could be affected. The extracted information when aggregated seems to emphasize the importance of safeguarding such institutions against cyber threats. The presence of a designated ransomware group, identified as “funksec,” adds another layer of severity concerning the data breach impact, likely increasing the vulnerability of the information disseminated by this government agency.