THREAT OPS › Threat News › [play] Red Star Oil posted to leak site
[play] Red Star Oil posted to leak site
Ransomware group: play Victim: Red Star Oil Victim website: redstaroil.com Sector: Energy & Utilities Country: RS Discovered: 2026-09-08T20:46:45.441557+00:00 Leak-site post: http://ipi4tiumgzjsym6pyuzrfqrtwskokxokqannmd6sa24shvr7x5kxdvqd.onion/topic.php?id=URWl0S32MlBaOs Description: United States Note: leak-site listings typically precede public disclosure.
Attributed threat actors
- PlayG1040
Indicators of compromise
- redstaroil.comdomain
- http://ipi4tiumgzjsym6pyuzrfqrtwskokxokqannmd6sa24shvr7x5kxdvqd.onion/topic.php?id=URWl0S32MlBaOsurl