RANSOMWARE VICTIMAGRICULTURE AND FOOD PRODUCTION

Jordan India Fertilizer Company

netrunner📍 JO (JO)📅 April 2, 2026
5
same group

Attack Intelligence

Jordan India Fertilizer Company was compromised in a ransomware attack attributed to netrunner in April 2026. The organization, operating in the Agriculture and Food Production sector in JO, was added to the group's data leak site as part of an extortion campaign.

netrunner operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Indian Farmers Fertiliser Cooperative (IFFCO) and Jordan Phosphates Mines Company Ltd (JPMC) had formed a Limited Liability Joint Venture Company, namely Jordan India Fertiliser Company (JIFCO) on March 6, 2008 in Amman, Jordan under the 'Free Zone' system to set up a Phosphoric Acid Plant of 1500 tonnes per day P2O5 capacity at Eshidiya in Jordan. In this company, IFFCO and its affiliates hold 52 % equity, while JPMC holds 48 % equity.

Other Victims — netrunner (5)

Quick Facts

CountryJO (JO)
SectorAgriculture and Food Production
Attack DateApr 2, 2026
Intel Sourceransomlook

Threat Group

netrunner
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.