THREATOPS
THREAT OPSThreat News › [qilin] Cosmocolor SA de CV posted to leak site

[qilin] Cosmocolor SA de CV posted to leak site

medransomware_livePublished 2026-08-28

Ransomware group: qilin Victim: Cosmocolor SA de CV Victim website: cosmocolor.com.mx Sector: Manufacturing Country: MX Discovered: 2026-08-28T13:05:48.580373+00:00 Leak-site post: http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=920d72a2-e450-4ab2-9540-9fef193bf438 Description: N/A Note: leak-site listings typically precede public disclosure.

Indicators of compromise

Original source: http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=920d72a2-e450-4ab2-9540-9fef193bf438