RANSOMWARE VICTIMTECHNOLOGY⚠ DUPLICATE CLAIM

GSM PORTAL TEKNOLOJİ HİZMETLERİ TİC. LTD. ŞTİ

TENGU📍 TR (TR)📅 January 18, 2026
8
same group

Attack Intelligence

GSM PORTAL TEKNOLOJİ HİZMETLERİ TİC. LTD. ŞTİ was compromised in a ransomware attack attributed to TENGU in January 2026. The organization, operating in the Technology sector in TR, was added to the group's data leak site as part of an extortion campaign.

TENGU operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

This is a small to medium-sized Turkish company officially registered in Istanbul, operating in the GSM telecommunications technology and technical services sector. It has complete official documentation but is not very active digitally

Additional Details

Other Victims — TENGU (8)

crown-security.com.tw
TW · —
Mar 2026
Sileno Companies Inc
—
Mar 2026
Eos Technology srl
IT · Technology
Mar 2026
Communitymosaic.co.uk
GB · —
Mar 2026
DAINTY CLOUD INC
US · —
Mar 2026
martec.it
IT · Technology
Feb 2026
Al Arif Contracting Co. (L.L.C)
AE · Construction
Feb 2026
www.shora.ma
MA · —
Feb 2026

Quick Facts

CountryTR (TR)
SectorTechnology
Attack DateJan 18, 2026
Intel Sourceransomware.live
StatusDUPLICATE CLAIM

Threat Group

TENGU
Motivation: financial
View group profile →

External Links

Leak Site → Screenshot (RansomLook) Google (news) Search CTI.watch
Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.
← All Victims·Threat Actors