Summary
Written by ThreatClusterfrom site fields, victim profile, leak post, screenshotTitan claims to have fully encrypted ELCON MEGARAD S.p.A, including the entire company infrastructure—servers, backups, and workstations—with all files locked. They state there is no external recovery tool that can restore access. The leak post, which is published, identifies ELCON MEGARAD S.p.A (domain elconmegarad.com) as the victim and notes contact via a reply to the email sent to the company. They warn not to restore or involve authorities and say they monitor the network.
Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.
What was taken
ELCON MEGARAD S.p.A fully encrypted. ~ ELCON MEGARAD S.p.A · TITAN The entire company infrastructure, including all servers, backups, and workstations, has been encrypted with the TITAN ransomware. Status: All files are locked. No external recovery tool can help. Contact: Reply to the email we sent to the company. Warning: Do not attempt to restore or involve authorities – we monitor your network.
Also stated on the leak page
Fields this group publishes that do not map to a standard column. Labels are the site's own.
- Part of contacts
- https://cryptpad.fr/sheet/#/2/sheet/view/9ec4PQtfZFxp4OOpVYnwQLZHSFKcW3ydNtg6TlKwmno/
Leak-site images (11)
Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.