Redpacketsecurity CLIMAX Ransomware Targets Nepal Electricity Authority
Article Content
- •CLIMAX ransomware claims to have targeted Nepal Electricity Authority.
- •No confirmed details on the attack method or data exfiltration.
- •NEA is critical infrastructure for Nepal's power supply.
On November 10, 2026, the CLIMAX ransomware group listed the Nepal Electricity Authority (NEA) on its data-leak site, marking it as 'Published'. No details regarding the attack method, data volume, or affected systems have been verified, and NEA has not confirmed any breach. The NEA is critical to Nepal's power infrastructure, managing generation, transmission, and distribution. Previous incidents involving NEA include a claimed hack by a hacktivist group in November 2025, which NEA attributed to maintenance. As of now, the nature and scope of the alleged incident remain uncorroborated, and no ransom demands or specific data theft claims have been disclosed.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Climax INC, Climax and Nepal Electricity Authority in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
Has NEA confirmed a breach?
What systems are affected?
What should NEA do next?
Continue Reading
Critical RCE Vulnerability in Confection WordPress Plugin (CVE-2026-115252) A critical vulnerability, CVE-2026-115252, has been identified in the Confection WordPress Cable plugin, affecting versions 0.4.0 to 0.4.7. This flaw allows unauthenticated attackers to execute arbitrary PHP code on the server by writing unmodified settings into a PHP file without proper checks. The vulnerability has… 
Critical RCE and LPE Vulnerabilities in Quest Foglight for Databases On November 3, 2026, the Zero Day Initiative disclosed multiple critical vulnerabilities in Quest Foglight for Databases, including six remote code execution (RCE) flaws and two local privilege escalation (LPE) vulnerabilities. The most severe RCE vulnerabilities, CVE-2026-92189 and CVE-2026-92190, allow…