THREAT OPS › Threat News › [dragonforce] TUI China posted to leak site
[dragonforce] TUI China posted to leak site
Ransomware group: dragonforce Victim: TUI China Victim website: tui.cn Sector: Hospitality Country: CN Discovered: 2026-08-03T06:52:53.230294+00:00 Leak-site post: http://z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.onion/blog/?post_uuid=eac9b985-c649-480d-815d-805c0c980241 Description: An affiliate of TUI Group, the world's number one leisure tourism business, TUI China was establishe
Indicators of compromise
- tui.cndomain
- http://z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.onion/blog/?post_uuid=eac9b985-c649-480d-815d-805c0c980241url