RANSOMWARE VICTIMTRANSPORTATION/LOGISTICS⚠ DUPLICATE CLAIM
KOREANAIRCND.COM
KOREANAIRCND.COM
clop📍 South Korea (KR)📅 November 21, 2025
8
same group
Attack Intelligence
KOREANAIRCND.COM was compromised in a ransomware attack attributed to clop in November 2025. The organization, operating in the Transportation/Logistics sector in South Korea, was added to the group's data leak site as part of an extortion campaign.
clop operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.
Additional Details
Other Victims — clop (8)
Quick Facts
CountrySouth Korea (KR)
SectorTransportation/Logistics
Attack DateNov 21, 2025
DomainKOREANAIRCND.COM
Intel Sourceransomlook
StatusDUPLICATE CLAIM
Threat Group
External Links
Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.