THREAT OPS › Threat News › [dragonforce] STEP Oiltools posted to leak site
[dragonforce] STEP Oiltools posted to leak site
Ransomware group: dragonforce Victim: STEP Oiltools Victim website: stepoiltools.com Sector: Energy Country: RO Discovered: 2026-07-12T17:55:01.344752+00:00 Leak-site post: http://z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.onion/blog/?post_uuid=2aedf0cd-9031-4333-aa3b-3b775041d7d3 Description: STEP Oiltools is a leading global provider of solids control and drilling waste management
Indicators of compromise
- stepoiltools.comdomain
- http://z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.onion/blog/?post_uuid=2aedf0cd-9031-4333-aa3b-3b775041d7d3url