Close Menu
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) Instagram Threads
Ransomnews
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) LinkedIn
Ransomnews

TENGU · Threat actor profile

// THREAT ACTOR

TENGU_

Dormant

TENGU is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem — file encryption combined with the threat of stolen-data publication on a public leak site — and continues to post fresh victim claims as part of an ongoing extortion campaign.

For Ransomnews editorial coverage of TENGU — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.

52 Victims tracked
0 / 7 Active mirrors
2025-10-10 First listing
2026-03-10 Most recent

Victims by year

  • 2026 41
  • 2025 11

Leak site mirrors

7 mirrors tracked, 0 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.

  • fuvodyoktsjdwu3mrbbrmdsmtblkxau6l7r5dygfwgzhf36mabjtcjad.onion. snapshot · 2025-10-10 10:12
  • longcc4fqrfcqt5lzceutylaxir6h66fp6df3oin6mvwvz6pfdbxc6qd.onion Shisa Ransomware Blog snapshot · 2026-06-01 14:11
  • longejh5gj5igfinj36rmqt2ydx2vun6zmditi3ij6hebawnn4xucqad.onion Shisa Ransomware Blog snapshot · 2026-06-01 13:11
  • longf6faa6tiudn5n6ar77z5balign2cxo2tjfsxuf6wnlzjamqew2yd.onion Shisa Ransomware Blog snapshot · 2026-06-01 14:14
  • longhbqhzlv3p7tvx3iwhfizkmtkm2nhnlbw5d4qr65wjz5e6aa23mid.onion Shisa Ransomware Blog snapshot · 2026-06-01 14:12
  • longjr5sl6a57ajn52nysmvgobmb7lktjthssmt2jeyjagk3rw36djyd.onion Shisa Ransomware Blog snapshot · 2026-06-01 13:21
  • longvqprqrb4zbxooswz4upefhtikhnyqv4gw4fkzpkc2wjpvxsucwid.onion Shisa Leaks snapshot · 2026-03-12 13:20

Recent victims

The 50 most recent victims claimed by TENGU. Total in the index: 52.

Date listed Victim Description
2026-03-10 crown-security.com.tw Crown Security is a technology company specializing in information sec…
2026-03-07 Sileno Companies Inc Sileno Companies Inc. A US company primarily operating in the hospital…
2026-03-04 Communitymosaic.co.uk Community Mosaic Cic is an active company incorporated on 21 June 2018…
2026-03-04 Eos Technology srl Eos Technology srl is a company with 15 years of experience in the ICT…
2026-03-01 DAINTY CLOUD INC DaintyCloud offers a variety of affordable virtual private server (VPS…
2026-02-25 Al Arif Contracting Co. (L.L.C) AAG Construction strives to grow our organization through investigatin…
2026-02-25 martec.it MARTEC MARINE is part of an Italian privately owned Group active in th…
2026-02-20 www.shora.ma Shora Advisory is a network of accounting, consulting, and auditing fi…
2026-02-18 femar.it Femar Group is a multifaceted company based in Catania, specializing i…
2026-02-18 真言宗智山派 成就院 Jōju-in is a traditional Japanese Buddhist temple belonging to the Shi…
2026-02-10 Junta Local de Conciliación y Arbitraje Affiliated with the Government of Mexico City, it provides information…
2026-02-10 PT. Mitra Antar Tangguh PT. Mitra Utama Sinergi Tangguh is a company officially registered in …
2026-02-04 megasilver.com.tw Megasilver Information System Co., Ltd. (Chinese: 兆銀資訊系統股份有限公司) is a T…
2026-01-31 all Data Tahkout Group skyegtours.com KSP TLM INDONESIA COMPAGNIE FONCIÈRE PARI…
2026-01-30 We will be back soon We are currently preparing all the files of the companies we hacked an…
2026-01-29 b2motorsport.co.il B2 Motorsport (known as B2M for short) is an Israeli company/workshop …
2026-01-28 Tahkout Group Tahkout Group is a large Algerian group of companies (sometimes descri…
2026-01-27 KSP TLM INDONESIA KSP TLM Indonesia is a large cooperative savings and loan association …
2026-01-27 FRUIT-BONTÉ Agroalimentaire FRUIT-BONTÉ Agroalimentaire is a Tunisian food company operating in th…
2026-01-27 lenotech.com.ph Lenotech Corporation specializes in a diverse range of technology prod…
2026-01-27 COMPAGNIE FONCIÈRE PARISIENNE COMPAGNIE FONCIÈRE PARISIENNE (abbreviated as CFP) is a French company…
2026-01-27 skyegtours.com Sky Egypt specializes in tourism services, offering a range of travel …
2026-01-26 Disuelas JC SAS La empresa Disuelas Jc Sas tiene como domicilio principal de su activi…
2026-01-26 premmotors.com Prem Motors is a leading automobile dealership for Maruti Suzuki, esta…
2026-01-26 namico.go.ke The National Mining Corporation (NAMICO) is a Kenyan state corporation…
2026-01-26 Jakarta Nanyang School Jakarta Nanyang School (JNY) is a co-educational institution catering …
2026-01-22 STRONG WINGS LLP STRONG WINGS LLP is an Indian Limited Liability Partnership operating …
2026-01-20 www.coconutboard.gov.in The Coconut Development Board (CDB) focuses on the promotion and devel…
2026-01-19 Deck India Engineering Pvt. Ltd Deck India Engineering Pvt. Ltd. specializes in various heat treatment…
2026-01-18 GSM PORTAL TEKNOLOJİ HİZMETLERİ TİC. LTD. ŞTİ This is a small to medium-sized Turkish company officially registered …
2026-01-17 Nafae Sanitaire S.a.r.l Nafae Sanitaire S.a.r.l A local company in Tangier – Castilla district…
2026-01-17 anfibius.net Anfibius is an Ecuadorian company specializing in providing software s…
2026-01-16 https://comercialautomotriz.com Comercial Automotriz de los Altos S.A. de C.V. is a Mexican small/medi…
2026-01-16 Grupo Roa Grupo ROA is a Mexican group of companies operating in the constructio…
2026-01-15 Nordstrom Rack Nordstrom Rack is a company that operates in the Apparel & Accessories…
2026-01-14 Samson Equipment Samson Equipment specializes in designing and manufacturing custom wei…
2026-01-14 https://seha.org.sa https://seha.org.sa/ This is the official website of the Health Servi…
2026-01-14 Quick Safety Electric Quick Safety Electric Ltd (קויק סייפטי אלקטריק בע״מ) is an Israeli com…
2026-01-12 www.charoenchai.com CHAROENCHAI TRANSFORMER CO., LTD. is a manufacturer and supplier of el…
2026-01-07 strategic-ts.com The website https://strategic-ts.com/ belongs to a small US-based IT a…
2026-01-06 baja.gob.mx This is the official website of the Baja California State Government i…
2025-12-12 Unknown Unknown
2025-12-09 https://www.revnomix.com Revnomix - India Provides data analytics and revenue management servic…
2025-11-27 **Rollingertec S.A. - Luxembourg** **Rollingertec S.A. - Luxembourg** Offering integrated solutions in t…
2025-11-23 Coral Clubes - Mexico Coral Clubes - Mexico The Fimex Group offers a collection of luxury l…
2025-10-24 Le MULTI LABORATOIRE LC2A Le Multi Laboratoire LC2A offers a platform for businesses looking to …
2025-10-23 UniCursos, Brazil UniCursos, Brazil - Offers preparation courses for public sector exams…
2025-10-23 FOOD & MUSIC MANAGEMENT SL Food & Music Management SL, based in Barcelona, Spain, is a leading co…
2025-10-23 Al Rimal Group Al Ramal Group is a manufacturing company specializing in food product…
2025-10-23 STAR LÉGUMES Star Legumes, Morocco - Provides wholesale services for fruits, vegeta…

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.

Facebook X (Twitter) LinkedIn
© 2026 Ransomnews.com

Type above and press Enter to search. Press Esc to cancel.

Cookies on Ransomnews

We use strictly-necessary cookies to run the site and may use first-party analytics to understand which articles are read. Some pages contain affiliate links — when you click one, the affiliate network sets cookies on the merchant's domain to attribute the referral. See the Cookie Policy and Affiliate Disclosure for detail.

RANSOMNEWS.COM

Tracking the criminal infrastructure of the internet.

Independent coverage of ransomware, breach economics, threat actors, privacy, AI security, and the open-source investigation toolkit.

// Topics

  • News
  • Security
  • Privacy
  • Cybercrime
  • AI
  • OSINT
  • Threat Groups
  • Stealer Logs
  • Ransomtracker
  • Stealercheck
  • FortiBleed Checker

// Site

  • About Us
  • Editorial Team
  • Contact
  • Tip Line
  • Editorial

// Legal

  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Funding & Independence
  • RSS Feed
© 2026 Ransomnews.com · Tracking the criminal infrastructure of the internet.