Ransomware.live 👀

rtdc.gov.mn

Ransomware Group:

Discovery Date: 2025-01-27 08:05

rtdc.gov.mn access

rtdc.gov.mn has been previously claimed by Funksec for an attack estimated on 2024-12-17.

This could suggest a new attack, a cross-claim between brands by the same threat actor, or the recycling of previously leaked stolen data.

Update Date: 2025-01-27

Victim: | Group:

barilga.gov.mn

Ransomware Group:

Funksec

Discovery Date: 2025-01-15 15:24

Sector: Government

[AI generated] Barilga.gov.mn is a Mongolian company that provides comprehensive information, support and professional solutions related to the real estate market. Major services include updates about real estate laws, listings for properties, and advertisements for property companies. Furthermore, it helps citizens to efficiently buy, sell or rent properties across Mongolia. The name "barilga" translates to "construction" in English.

Victim: | Group:

bayan-ulgii.cfga.gov.mn

Ransomware Group:

Funksec

Discovery Date: 2025-01-05 02:28

Sector: Government

[AI generated] "Bayan-Ulgii" appears to refer to Bayan-Ölgii, a province in western Mongolia known for its Kazakh culture and traditions. The ".cfga.gov.mn" domain suggests an affiliation with a Mongolian government agency, possibly related to agriculture or regional governance. This entity likely focuses on administrative, agricultural, or cultural affairs within Bayan-Ölgii, supporting local development and community initiatives.

Victim: | Group:

tsag-agaar.gov.mn

Ransomware Group:

Funksec

Discovery Date: 2024-12-31 09:14

Sector: Transportation/Logistics

[AI generated] Tsag-agaar.gov.mn is the official website of the National Agency for Meteorology and Environmental Monitoring of Mongolia. The agency is responsible for providing weather forecasts, climate data, and environmental monitoring services across Mongolia. It plays a crucial role in informing the public and government about weather conditions, climate changes, and environmental issues to aid in planning and decision-making.

Victim: | Group:

timely.mn

Ransomware Group:

Darkvault

Discovery Date: 2024-12-28 17:01

Sector: Technology

Timely аппликейшн ямар нэгэн нэмэлт төхөөрөмж шаардлагагүйгээр ажилтны цагийг түргэн шуурхай цагаа бүртгэх хялбар платформ юм. Бизнес үйл ажиллагаа эрхэлж байгаа Та хэдэн ч ажилтантай байсан манай платформыг ашиглан ажилчдын хоцролт, илүү цаг, чөлөө зэргийг бүрэн хянах боломжтой юм.

Victim: | Group:

ndc.energy.mn

Ransomware Group:

Funksec

Discovery Date: 2024-12-20 16:43

Sector: Energy

[AI generated] ndc.energy.mn is a company focused on renewable energy solutions and sustainable development. Based in Mongolia, it aims to address energy needs through innovative technologies and eco-friendly practices. The company works on projects that harness solar, wind, and other renewable resources, contributing to energy efficiency and environmental conservation. Their initiatives support Mongolia's transition to a greener economy.

Victim: | Group:

rtdc.gov.mn

Ransomware Group:

Funksec

Discovery Date: 2024-12-17 10:24

Sector: Government

[AI generated] RTDC.gov.mn is the official website for the Research and Training Development Center (RTDC) in Mongolia. This organization focuses on advancing research, providing training programs, and supporting development initiatives within the country. It aims to foster innovation and enhance skills across various sectors to contribute to Mongolia's socio-economic growth. The center collaborates with educational institutions, government bodies, and industry partners.

Victim: | Group:

Intermed Hospital Mongolia

Ransomware Group:

Spacebears

Discovery Date: 2024-11-08 05:24

Estimated Attack Date: 2024-10-30

Sector: Healthcare

Largest medical center in Mongolia: - Databases,- Personal data - Other valuable information- dcm, xls, jpg, txt... ect. http://www.intermed.mn

Victim: | Group:

Short Name	Full Name	Email Contact	Sector
MNCERT/CC	Mongolian Cyber Emergency Response Team / Coordination Center	apcert-team mncert.org	ICT vendor customer base
National CSIRT of Mongolia	National CSIRT of Mongolia	contact ncsirt.gov.mn	Government, Private and Public sectors
Public CSIRT / CC of Mongolia	Public CSIRT / CC of Mongolia	gantuya pubcert.mn	Government, Private and Public sectors

rtdc.gov.mn

barilga.gov.mn

bayan-ulgii.cfga.gov.mn

tsag-agaar.gov.mn

timely.mn

ndc.energy.mn

rtdc.gov.mn

Intermed Hospital Mongolia

TTPs information for this group:

Infostealer information available for

Icon Legend

CERTs/CSIRTs Contact Information for Mongolia