Captured Sep 16, 2026

Reddrop Group

qilin

Ransomware leak-site victim intelligence · EN

Views

7,856

Posted

Sep 16, 2026

Country

Industry

Grocery Retail

Summary

Written by ThreatClusterfrom site fields, victim profile, leak post, screenshot

The leak post identifies reddrop.com.au as the victim (grocery retailer) and does not specify what data was taken or how much. It also provides a TOX hash, an onion link, and a WikileaksV2 reference on the leak page. The leak page is published, and ThreatCluster captured a screenshot of the post.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains: reddrop.com.au

What was taken

Reddrop Group

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

TOX: 7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68
tox_hash: TOX: 7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68
onion_link: http://pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion
WikileaksV2: https://wikileaks2.com/
wikileaks_source: WikileaksV2 (https://wikileaks2.com/)

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture

Logo of "REDDROP GROUP" featuring stylized text with colored bars above the letters.

onion leak page33 KB

Negotiation

Tox 7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68

Onion http://pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion