Ransomware Group intelligence
Tengu
ActiveTrack Tengu with 50 published victims and 1 known leak locations in a single intelligence view.
Overview
Tengu is tracked by Breach House as a ransomware group with 50 published victims.
Morocco is currently the most targeted country in this dataset.
1 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (1)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | longcc4fqrfcqt5lzceutylaxir6h66fp6df3oin6mvwvz6pfdbxc6qd.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (50)
Search, filter and paginate the victim timeline for Tengu.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | Sileno Companies Inc id27173 View details | Hospitality / Food & Beverage / Tourism | |||
|
Sileno Companies Inc. A US company primarily operating in the hospitality and real estate sectors, its activities include: Hotel operation Property management Management of hotels' restaurants and bars Hospitality project development 22.9TB was encrypted in 14 hours on 3/5/2026 More than 67.07 GB was extracted |
|||||
| Ransomware | Communitymosaic.co.uk id27080 View details | United Kingdom | Other | ||
|
Community Mosaic Cic is an active company incorporated on 21 June 2018 with the registered office located in Peterborough, Cambridgeshire. Community Mosaic Cic was registered 7 years ago |
|||||
| Ransomware | Eos Technology srl id27079 View details | Italy | IT | ||
|
Eos Technology srl is a company with 15 years of experience in the ICT sector, initially starting as an assembly and repair laboratory for PCs and peripherals. Over time, it has developed expertise that has allowed it to become a partner of various international brands. The company offers a range of services including IT assistance, multimedia services, help desk support, corporate security systems, and the design of virtual switchboards and video surveillance systems. Eos Technology srl aims to provide consulting services to clients navigating the dynamic audiovisual ICT landscape. |
|||||
| Ransomware | DAINTY CLOUD INC id26934 View details | United States | IT | ||
|
DaintyCloud offers a variety of affordable virtual private server (VPS) solutions including Windows, Linux, and GPU servers across more than 34 data centers worldwide. Their services cater to clients who require high performance for applications such as gaming, video processing, and cloud computing. With competitive pricing and features like one-click deployment and easy management, DaintyCloud is geared towards both individual users and businesses seeking reliable cloud services. Additionally, they provide proxy services, ensuring clients have access to high-speed, dedicated IP options |
|||||
| Ransomware | Al Arif Contracting Co. (L.L.C) id26856 View details | United Arab Emirates | Construction / Real Estate | ||
|
AAG Construction strives to grow our organization through investigating advancing technology, industry changes and the varying needs of our clientele as our industry evolves. We will continuously diversify our skill set to distinguish us from our competition and foster loyal customers as we build infrastructure projects that improve the quality of life in UAE and the Region. (OR) The Company continues to move forward in become the leading Engineering and Construction firm in UAE and eventually the region, by consistently delivering projects that meet international standards.. AAG Construction strives to grow our organization through investigating advancing technology, industry changes and the varying needs of our clientele as our industry evolves. We will continuously diversify our skill set to distinguish us from our competition and foster loyal customers as we build infrastructure projects that improve the quality of life in UAE and the Region. (OR) The Company continues to move |
|||||
| Ransomware | martec.it id26855 View details | Italy | IT | ||
|
MARTEC MARINE is part of an Italian privately owned Group active in the Defense and Integrated Safety solutions for Navy, Cruise ships and Mega Yachts since 1994.From the early beginning of its activities Martec has deeply invested in the design and development of safety systems, being awarded, at present, as one of the most skilled companies in an international context, in this field.More than 12 Navy ships and more than 80 Cruise liners and Mega Yachts have Martec Damage Control Systems installed.Product range vary from hardware (Damage Control Systems, Electronic Incident Board, Fire Detection System, Emergency Shutdown System, Automatic Fire Sensing and Suppression System) to software packages (Damage Control, Decision Support, On Board Stability, Personnel Tracking, Security and Technical Patrol Management, Injured Treatment).Innovation, Integration and Flexibility are the key words for MARTEC: development of new solutions based on customer requirements, integration with third par |
|||||
| Ransomware | www.shora.ma id26688 View details | Morocco | Services | ||
|
Shora Advisory is a network of accounting, consulting, and auditing firms located in major cities across Morocco, dedicated to providing high value-added services. They offer a range of services including financial management consulting, accounting expertise, legal and tax expertise, and training. The company focuses on proximity to clients, respecting their specific needs and constraints related to their industry. Shora Advisory aims to combine their expertise with that of their clients to foster mutual success |
|||||
| Ransomware | femar.it id26638 View details | Italy | Healthcare / Pharma | ||
|
Femar Group is a multifaceted company based in Catania, specializing in various sectors including special services, logistics, energy, and pharmaceuticals. The group encompasses several subsidiaries such as Femar Servizi Speciali, Femar Logistica, and Silverpharma, among others. Their diverse offerings cater to a wide range of clients looking for comprehensive solutions in their respective industries. With a strong presence in the industrial zone, Femar Group aims to deliver quality services and products to meet the needs of its clientele |
|||||
| Ransomware | 真言宗智山派 成就院 id26637 View details | Japan | NGOs / Associations | ||
|
Jōju-in is a traditional Japanese Buddhist temple belonging to the Shingon-shū Chisan-ha (真言宗智山派) sect, one of the main branches of Shingon Buddhism in Japan. The temple is located in Tochigi Prefecture (栃木県), specifically in the Northern Tochigi (栃木北部) region |
|||||
| Ransomware | Junta Local de Conciliación y Arbitraje id26396 View details | Mexico | Public Sector | ||
|
Affiliated with the Government of Mexico City, it provides information and services related to the Local Commission for Labor Conciliation and Arbitration (Junta Local de Conciliación y Arbitraje) in Mexico City (Ciudad de México). |
|||||
| Ransomware | PT. Mitra Antar Tangguh id26395 View details | Indonesia | Other | ||
|
PT. Mitra Utama Sinergi Tangguh is a company officially registered in Indonesia in the form of a limited liability company PT – Perseroan Terbatas |
|||||
| Ransomware | megasilver.com.tw id26217 View details | Taiwan, Province of China | IT | ||
|
Megasilver Information System Co., Ltd. (Chinese: 兆銀資訊系統股份有限公司) is a Taiwanese company engaged in information technology services and software system development, especially in digital service solutions and intelligent operating systems. |
|||||
| Ransomware | all Data id26012 View details | Education | |||
|
Tahkout Group skyegtours.com KSP TLM INDONESIA COMPAGNIE FONCIÈRE PARISIENNE lenotech.com.ph Jakarta Nanyang School namico.go.ke |
|||||
| Ransomware | We will be back soon id26004 View details | Communication / Marketing | |||
|
We are currently preparing all the files of the companies we hacked and will publish them for you. We will disappear for a while to fix some internal issues and will return with a new TENGU RaaS version that everyone can join |
|||||
| Ransomware | b2motorsport.co.il id25915 View details | Israel | Manufacturing / Engineering | ||
|
B2 Motorsport (known as B2M for short) is an Israeli company/workshop for improving and modifying cars and motorcycles, offering high-performance services and spare parts for models such as BMW and MINI, as well as motorcycle parts. |
|||||
| Ransomware | Tahkout Group id25897 View details | Algeria | Manufacturing / Engineering | ||
|
Tahkout Group is a large Algerian group of companies (sometimes described as a business alliance) founded and run by Mahieddine Tahkout, a well-known Algerian businessman in the automotive, transport, real estate and industrial sectors. |
|||||
| Ransomware | KSP TLM INDONESIA id25855 View details | Indonesia | Retail / E-commerce | ||
|
KSP TLM Indonesia is a large cooperative savings and loan association in Indonesia that focuses on empowering the community economy - especially small and medium-sized female entrepreneurs. |
|||||
| Ransomware | FRUIT-BONTÉ Agroalimentaire id25854 View details | France | Agriculture / Food | ||
|
FRUIT-BONTÉ Agroalimentaire is a Tunisian food company operating in the agricultural sector and the production of fruit-based food products. |
|||||
| Ransomware | lenotech.com.ph id25850 View details | Philippines | IT | ||
|
Lenotech Corporation specializes in a diverse range of technology products, including peripherals, laptops, and storage solutions from well-known brands such as A4tech, Lenovo, and Seagate. Their offerings include advanced gaming mice, high-performance laptops, and reliable dash cameras, catering to both individual consumers and businesses. The company aims to serve tech-savvy clients looking for quality and innovative technology solutions. With a commitment to customer satisfaction, Lenotech also provides marketing and dealer application services |
|||||
| Ransomware | COMPAGNIE FONCIÈRE PARISIENNE id25849 View details | France | Construction / Real Estate | ||
|
COMPAGNIE FONCIÈRE PARISIENNE (abbreviated as CFP) is a French company that operates in real estate, specifically in the leasing and management of real estate (renting and managing buildings and land). |
|||||
| Ransomware | skyegtours.com id25848 View details | United Kingdom | Transportation / Travel | ||
|
Sky Egypt specializes in tourism services, offering a range of travel packages and flight tickets. The company aims to provide quality travel experiences to clients looking to explore various destinations. They cater to travelers seeking both budget-friendly and premium options. Sky Egypt emphasizes customer satisfaction and convenience in planning travel itineraries |
|||||
| Ransomware | Disuelas JC SAS id25817 View details | Colombia | Communication / Marketing | ||
|
La empresa Disuelas Jc Sas tiene como domicilio principal de su actividad la dirección, CALLE 26 SUR 29 49 en la ciudad de BOGOTA, BOGOTA. El teléfono de Disuelas Jc Sas es el 6016296011. Esta empresa fué constituida como SOCIEDAD POR ACCIONES SIMPLIFICADA y se dedica a Fabricacion de partes del calzado |
|||||
| Ransomware | premmotors.com id25816 View details | India | Communication / Marketing | ||
|
Prem Motors is a leading automobile dealership for Maruti Suzuki, established in 1990 and headquartered in Gwalior, India. The company operates 58 showrooms, 43 workshops, and various outlets across multiple states, providing a comprehensive range of services including sales, service, accessories, finance, and insurance. With a strong focus on customer satisfaction and a commitment to quality, Prem Motors has earned numerous awards for its performance and service excellence. The company aims to deliver a unique buying experience and maintain a professional reputation among manufacturers, financiers, and customers alike. |
|||||
| Ransomware | namico.go.ke id25815 View details | Kenya | Public Sector | ||
|
The National Mining Corporation (NAMICO) is a Kenyan state corporation that serves as the government's investment arm in the mining and minerals sector. Established under the Kenya Mining Act 2016, its primary objective is the exploration, development, management, and investment of the country's mineral resources on behalf of the state. |
|||||
| Ransomware | Jakarta Nanyang School id25814 View details | Indonesia | Education | ||
|
Jakarta Nanyang School (JNY) is a co-educational institution catering to students aged 3 to 18, offering a global and progressive educational approach. Established in 2012 in Bumi Serpong Damai, JNY focuses on the holistic development of students, enhancing their academic, moral, physical, social, and emotional growth. The school provides a nurturing environment and a variety of programs including Kindergarten, Primary, Secondary, and Junior College. JNY aims to serve families seeking a comprehensive and innovative educational experience for their children |
|||||
| Ransomware | STRONG WINGS LLP id25694 View details | Manufacturing / Engineering | |||
|
STRONG WINGS LLP is an Indian Limited Liability Partnership operating in the automotive, vehicle maintenance, and related trading sectors, and is officially registered in Pune, Maharashtra, India. |
|||||
| Ransomware | www.coconutboard.gov.in id25622 View details | India | Communication / Marketing | ||
|
The Coconut Development Board (CDB) focuses on the promotion and development of coconut cultivation and processing in India. It offers a range of products including virgin coconut oil, desiccated coconut, and coconut milk, catering to both domestic and international markets. The board supports farmers and producer companies through various schemes and technology missions aimed at enhancing productivity and sustainability. Its intended clients include coconut farmers, producers, and consumers interested in coconut-based products. |
|||||
| Ransomware | Deck India Engineering Pvt. Ltd id25593 View details | India | Manufacturing / Engineering | ||
|
Deck India Engineering Pvt. Ltd. specializes in various heat treatment services including Liquid Nitriding, Nitro Carburising, and Gas Nitriding, serving a diverse client base across Maharashtra and beyond. Established in Pune in 1998, the company is recognized as the first SSI unit in the area dedicated to these processes, with a strong focus on quality and customer satisfaction. The management team consists of professional engineers and metallurgists with extensive industry experience. Additionally, they manufacture and supply heat treatment equipment and furnaces to meet high standards in various industries. |
|||||
| Ransomware | GSM PORTAL TEKNOLOJİ HİZMETLERİ TİC. LTD. ŞTİ id25579 View details | Türkiye | IT | ||
|
This is a small to medium-sized Turkish company officially registered in Istanbul, operating in the GSM telecommunications technology and technical services sector. It has complete official documentation but is not very active digitally |
|||||
| Ransomware | Nafae Sanitaire S.a.r.l id25570 View details | Morocco | Other | ||
|
Nafae Sanitaire S.a.r.l A local company in Tangier – Castilla district, specializing in plumbing and sanitary ware (sanitaire, plomberie, chauffage) |
|||||
| Ransomware | anfibius.net id25567 View details | Spain | Services | ||
|
Anfibius is an Ecuadorian company specializing in providing software solutions and technology services for integrated business and project management. |
|||||
| Ransomware | https://comercialautomotriz.com id25558 View details | Ecuador | Manufacturing / Engineering | ||
|
Comercial Automotriz de los Altos S.A. de C.V. is a Mexican small/medium-sized company operating in the automotive and tire sector. It specializes in: The sale of tires and auto parts Mechanical services and maintenance Retail sales and spare parts for vehicles It operates in several states, including Jalisco, Michoacán, and Aguascalientes, within the Los Altos region of Mexico. |
|||||
| Ransomware | Grupo Roa id25550 View details | Colombia | Construction / Real Estate | ||
|
Grupo ROA is a Mexican group of companies operating in the construction and infrastructure sector, founded on March 30, 1995 with the aim of meeting the challenges of large construction projects in the southeastern region of Mexico. |
|||||
| Ransomware | Nordstrom Rack id25530 View details | United States | Retail / E-commerce | ||
|
Nordstrom Rack is a company that operates in the Apparel & Accessories Retail industry. It employs 1to4 people and has 500Kto1M of revenue. The company is headquartered in San Jose, California |
|||||
| Ransomware | Samson Equipment id25526 View details | United States | Education | ||
|
Samson Equipment specializes in designing and manufacturing custom weight rooms tailored for schools, colleges, and tactical training professionals. Their product lineup includes a range of durable strength training equipment like power racks, barbells, and accessories, all made to withstand high usage. The company offers personalized services including 3D render consultations to envision the final layout of weight rooms before purchase. With a commitment to exceptional quality, customer service, and a lifetime warranty, Samson Equipment aims to empower athletes and training facilities alike. |
|||||
| Ransomware | https://seha.org.sa id25498 View details | Saudi Arabia | NGOs / Associations | ||
|
https://seha.org.sa/ This is the official website of the Health Services Association in the Qassim region of Saudi Arabia. It is a non-profit/charitable organization that provides health and social services to those in need. |
|||||
| Ransomware | Quick Safety Electric id25487 View details | Energy | |||
|
Quick Safety Electric Ltd (קויק סייפטי אלקטריק בע״מ) is an Israeli company officially registered in Lahavim, Israel, operating in the field of electricity/electrical services. |
|||||
| Ransomware | www.charoenchai.com id25442 View details | Thailand | Energy | ||
|
CHAROENCHAI TRANSFORMER CO., LTD. is a manufacturer and supplier of electrical transformers based in Thailand. They manufacture and distribute various types of electrical power transformers both domestically and for export. |
|||||
| Ransomware | strategic-ts.com id25354 View details | United States | IT | ||
|
The website https://strategic-ts.com/ belongs to a small US-based IT and technology services company—and serves as the official website for a company called Strategic Technology, which operates in IT services and technical support. This information is based on company data available from professional databases. |
|||||
| Ransomware | baja.gob.mx id25336 View details | Mexico | Public Sector | ||
|
This is the official website of the Baja California State Government in Mexico — an important government site used to provide e-services, official information, procedures for citizens, news, and local government programs. |
|||||
| Ransomware | Unknown id24733 View details | Other | |||
|
Unknown |
|||||
| Ransomware | https://www.revnomix.com id24593 View details | India | Hospitality / Food & Beverage / Tourism | ||
|
Revnomix - India Provides data analytics and revenue management services for hotels. Founded as a hospitality technology specialist, the company is dedicated to improving hotel performance through data-driven analytics solutions. The company is committed to quality, innovation, and customer satisfaction. |
|||||
| Ransomware | **Rollingertec S.A. - Luxembourg** id24277 View details | IT | |||
|
**Rollingertec S.A. - Luxembourg** Offering integrated solutions in the field of building technology and timber construction, with a special focus on roofs, facades, and metal insulation. Founded as a specialist in the sustainable construction sector, the company is dedicated to combining time-honored craft traditions with modern technology through comprehensive turnkey projects. The company is committed to high standards of quality, environmental sustainability, and customer satisfaction. |
|||||
| Ransomware | Coral Clubes - Mexico id24157 View details | Mexico | Hospitality / Food & Beverage / Tourism | ||
|
Coral Clubes - Mexico The Fimex Group offers a collection of luxury leisure and sports clubs, with a special focus on golf clubs and integrated resorts. Founded as a specialist in the leisure and sports sector, the group is dedicated to providing exceptional experiences for its members through world-class facilities. The group is committed to the highest standards of quality, service, and customer satisfaction. |
|||||
| Ransomware | Le MULTI LABORATOIRE LC2A id23329 View details | Morocco | Communication / Marketing | ||
|
Le Multi Laboratoire LC2A offers a platform for businesses looking to test or analyze their products by configuring their ideal analytical project online |
|||||
| Ransomware | UniCursos, Brazil id23316 View details | Brazil | Public Sector | ||
|
UniCursos, Brazil - Offers preparation courses for public sector exams in São José dos Campos and surrounding areas in the state of São Paulo. |
|||||
| Ransomware | FOOD & MUSIC MANAGEMENT SL id23304 View details | Spain | Agriculture / Food | ||
|
Food & Music Management SL, based in Barcelona, Spain, is a leading company in the hospitality and entertainment sector. It specializes in developing and managing high-end restaurants and culinary concepts that combine gastronomy with music and atmosphere. |
|||||
| Ransomware | Al Rimal Group id23303 View details | United Arab Emirates | Agriculture / Food | ||
|
Al Ramal Group is a manufacturing company specializing in food products. Al Ramal Food Industries FZCO was established in 2007 and is currently headquartered in the Sharjah Airport International Free Zone, Sharjah, United Arab Emirates. |
|||||
| Ransomware | STAR LÉGUMES id23302 View details | Morocco | Communication / Marketing | ||
|
Star Legumes, Morocco - Provides wholesale services for fruits, vegetables, spices, and dried seeds in Casablanca and surrounding areas. |
|||||
| Ransomware | Qatargas and Tar Company, Iran id23301 View details | Iran, Islamic Republic of | Energy | ||
|
Qatargas and Tar Company, Iran - Provides industrial gas and tar products to the petrochemical sector in Iran and regional markets |
|||||