RANSOMWARE VICTIMCONSTRUCTIONDUPLICATE CLAIM

Al Arif Contracting Co. (L.L.C)

TENGU📍 UAE (AE)📅 February 25, 2026
8
same group

Attack Intelligence

Al Arif Contracting Co. (L.L.C) was compromised in a ransomware attack attributed to TENGU in February 2026. The organization, operating in the Construction sector in UAE, was added to the group's data leak site as part of an extortion campaign.

TENGU operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

AAG Construction strives to grow our organization through investigating advancing technology, industry changes and the varying needs of our clientele as our industry evolves. We will continuously diversify our skill set to distinguish us from our competition and foster loyal customers as we build infrastructure projects that improve the quality of life in UAE and the Region. (OR) The Company continues to move forward in become the leading Engineering and Construction firm in UAE and eventually the region, by consistently delivering projects that meet international standards.. AAG Construction strives to grow our organization through investigating advancing technology, industry changes and the varying needs of our clientele as our industry evolves. We will continuously diversify our skill set to distinguish us from our competition and foster loyal customers as we build infrastructure projects that improve the quality of life in UAE and the Region. (OR) The Company continues to move

Additional Details

Other Victims — TENGU (8)

Quick Facts

CountryUAE (AE)
SectorConstruction
Attack DateFeb 25, 2026
Intel Sourceransomware.live
StatusDUPLICATE CLAIM

Threat Group

TENGU
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.