THREAT OPS › Threat News › [play] Rilpa Enterprises posted to leak site
[play] Rilpa Enterprises posted to leak site
Ransomware group: play Victim: Rilpa Enterprises Victim website: helis.com Sector: Not Found Country: n/a Discovered: 2026-08-09T19:26:26.785623+00:00 Leak-site post: http://j75o7xvvsm4lpsjhkjvb4wl2q6ajegvabe6oswthuaubbykk4xkzgpid.onion/topic.php?id=tlzf4PYMpW8BZK Description: Canada Note: leak-site listings typically precede public disclosure.
Attributed threat actors
- PlayG1040
Indicators of compromise
- helis.comdomain
- http://j75o7xvvsm4lpsjhkjvb4wl2q6ajegvabe6oswthuaubbykk4xkzgpid.onion/topic.php?id=tlzf4PYMpW8BZKurl