Ransomware group
Tengu ransomware: victims and leak site activity
The Tengu ransomware group has listed 49 victims on its leak site since October 2025; its latest post is from 7 March 2026. Most affected countries: India, Morocco and United States. Most targeted sector: Technology.
Total posts
49
First seen
2025-10-23
Latest post
2026-03-07
Countries hit
25
About Tengu
Tengu is a RaaS operation first observed in October 2025, following a double-extortion model and using Living Off The Land Binaries (LOLBins) to blend malicious activity with normal admin traffic, primarily targeting consumer goods, real estate, automotive, healthcare, and IT sectors.
- Also known as
- Shisa
- Leak site (Tor)
- http://longcc4fqrfcqt5lzceutylaxir6h66fp6df3oin6mvwvz6pfdbxc6qd.onion
Most targeted countries
- India 5
- Morocco 4
- United States 4
- Indonesia 3
- Italy 3
- Mexico 3
- United Arab Emirates 2
- Colombia 2
- Spain 2
- France 2
Most targeted sectors
- Technology 10
- Manufacturing 9
- Agriculture and Food Production 5
- Government & Defense 5
- Hospitality 4
- Professional Services 4
- Retail & E-Commerce 3
- Education 2
- Financial Services 2
- Energy & Utilities 1
Tengu victims per year
All 49 victims
Search every post in the full table.| Victim | Country | Sector | Discovered |
|---|---|---|---|
| Sileno Companies Inc | Switzerland | Hospitality | |
| Communitymosaic.co.uk | United Kingdom | Government & Defense | |
| Eos Technology srl | Italy | Technology | |
| DAINTY CLOUD INC | United States | Technology | |
| Al Arif Contracting Co. (L.L.C) | United Arab Emirates | Manufacturing | |
| martec.it | Italy | Technology | |
| www.shora.ma | Morocco | Professional Services | |
| femar.it | Italy | Professional Services | |
| 真言宗智山派 成就院 | Japan | Other | |
| Junta Local de Conciliación y Arbitraje | Mexico | Government & Defense | |
| PT. Mitra Antar Tangguh | Indonesia | Professional Services | |
| megasilver.com.tw | Taiwan | Technology | |
| all Data | — | Technology | |
| We will be back soon | — | — | |
| b2motorsport.co.il | Israel | Retail & E-Commerce | |
| Tahkout Group | Algeria | Manufacturing | |
| KSP TLM INDONESIA | Indonesia | Financial Services | |
| FRUIT-BONTÉ Agroalimentaire | France | Agriculture and Food Production | |
| lenotech.com.ph | Philippines | Technology | |
| COMPAGNIE FONCIÈRE PARISIENNE | France | Financial Services | |
| skyegtours.com | United Kingdom | Hospitality | |
| Disuelas JC SAS | Colombia | Manufacturing | |
| premmotors.com | India | Retail & E-Commerce | |
| namico.go.ke | Kenya | Government & Defense | |
| Jakarta Nanyang School | Indonesia | Education | |
| STRONG WINGS LLP | India | Manufacturing | |
| www.coconutboard.gov.in | India | Government & Defense | |
| Deck India Engineering Pvt. Ltd | India | Manufacturing | |
| GSM PORTAL TEKNOLOJİ HİZMETLERİ TİC. LTD. ŞTİ | Turkey | Technology | |
| Nafae Sanitaire S.a.r.l | Morocco | Professional Services | |
| anfibius.net | Spain | Technology | |
| https://comercialautomotriz.com | Ecuador | Manufacturing | |
| Grupo Roa | Colombia | Agriculture and Food Production | |
| Nordstrom Rack | United States | Retail & E-Commerce | |
| Samson Equipment | United States | Manufacturing | |
| https://seha.org.sa | Saudi Arabia | Healthcare | |
| Quick Safety Electric | Australia | Manufacturing | |
| www.charoenchai.com | Thailand | Agriculture and Food Production | |
| strategic-ts.com | United States | Technology | |
| baja.gob.mx | Mexico | Government & Defense | |
| https://www.revnomix.com | India | Technology | |
| **Rollingertec S.A. - Luxembourg** | — | Other | |
| Coral Clubes - Mexico | Mexico | Hospitality | |
| Le MULTI LABORATOIRE LC2A | Morocco | Manufacturing | |
| UniCursos, Brazil | Brazil | Education | |
| FOOD & MUSIC MANAGEMENT SL | Spain | Hospitality | |
| Al Rimal Group | United Arab Emirates | Agriculture and Food Production | |
| STAR LÉGUMES | Morocco | Agriculture and Food Production | |
| Qatargas and Tar Company, Iran | Iran | Energy & Utilities |