THREAT OPS › Threat News › [qilin] Ceres Tolvas posted to leak site
[qilin] Ceres Tolvas posted to leak site
Ransomware group: qilin Victim: Ceres Tolvas Victim website: cerestolvas.com.ar Sector: Agriculture and Food Production Country: AR Discovered: 2026-09-18T10:11:27.447248+00:00 Leak-site post: http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=6693ceb2-7649-44c6-917b-c4d3e3d4d027 Description: N/A Note: leak-site listings typically precede public disclosure.
Indicators of compromise
- cerestolvas.com.ardomain
- http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=6693ceb2-7649-44c6-917b-c4d3e3d4d027url