Ransomware Group: QILIN

VICTIM NAME: frylite[.]com

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the QILIN Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The victim of this ransomware attack is a company operating within the agriculture and food production sector, based in Ireland. The attack was discovered on June 5, 2025. The compromised organization, associated with the domain frylite.com, specializes in supplying vegetable oils and waste cooking oil collection services across Ireland. According to available information, all of the company’s data is scheduled to be made available for download on June 17, 2025. The leak page features a screenshot of internal data or related content, indicating the depth of the breach. The attack appears to involve data exfiltration, with at least six user accounts potentially impacted, and mentions the Lumma infostealer, which may have been involved in stealing data. No personal employee information is indicated as compromised, but the leak suggests sensitive corporate data may be at risk.

The leak page provides a link to a dark web site where the stolen data will be published. The screenshot included suggests internal documents or sensitive information was accessed. The targeted company is known for its contribution to vegetable oil supply and waste cooking oil collection, which is critical for food production and processing in Ireland. This incident highlights the ongoing threat to organizations involved in essential industries, emphasizing the importance of cybersecurity measures to prevent data breaches. Despite extensive details, no PII such as employee or customer personal data is explicitly indicated as compromised in the available information. The incident underscores the importance of monitoring threat actor activity and preparing for potential data leaks involving corporate operations.