tengu
Activity analysis
HackerFeeds has tracked 49 victims claimed by tengu since October 2025, most recently in March 2026 — ranking #109 of 332 groups (0.1% of all tracked ransomware victims). No new victims have been posted in the last 180 days; the most recent claim was in March 2026. Its most-targeted sector is Technology (10 victims), followed by Manufacturing (8). India accounts for 5 victims (11% of those with a known location); 3 victims did not disclose a location.
Victims per year
- 20259
- 202640
Top sectors
- Technology10
- Manufacturing8
- Public Sector5
- Agriculture and Food Production5
- Hospitality and Tourism4
- Business Services4
Top countries
Computed from victims claimed on the group's leak site as collected by HackerFeeds; claims are not independently verified. Monthly reports · Methodology
Group profile
Tengu is a RaaS operation first observed in October 2025, following a double-extortion model and using Living Off The Land Binaries (LOLBins) to blend malicious activity with normal admin traffic, primarily targeting consumer goods, real estate, automotive, healthcare, and IT sectors.
MITRE ATT&CK TTPs
Initial Access
T1078Valid Accounts
Abuse of valid accounts (obtained via infostealers or IABs).
Execution
Persistence
T1053.005Scheduled Task/Job: Scheduled Task
Creation of Scheduled Tasks that run with SYSTEM privileges to ensure re-infection.
Defense Evasion
Lateral Movement
T1021.001Remote Services: Remote Desktop Protocol
Lateral movement via RDP after compromising administrative credentials.
Exfiltration
T1041Exfiltration Over C2 Channel
Data exfiltration via C2 channels before starting the encryption routine.
Recent victims
| Date | Website / victim | Sector | Country |
|---|---|---|---|
| 2026-03-07 |  Sileno Companies Incsileno.com | Hospitality | CH |
| 2026-03-04 |  Communitymosaic.co.ukCommunitymosaic.co.uk | Government & Defense | GB |
| 2026-03-04 |  Eos Technology srleostechnology.net | Technology | IT |
| 2026-03-01 |  DAINTY CLOUD INCdaintycloud.com | Technology | US |
| 2026-02-25 |  Al Arif Contracting Co. (L.L.C)alarifgroups.ae | Manufacturing | AE |
| 2026-02-25 |  martec.itmartec.it | Technology | IT |
| 2026-02-20 |  www.shora.mawww.shora.ma | Professional Services | MA |
| 2026-02-18 |  femar.itfemar.it | Professional Services | IT |
| 2026-02-18 |  真言宗智山派 成就院jyojyuin.o.oo7.jp | Other | JP |
| 2026-02-10 |  Junta Local de Conciliación y Arbitrajecdmx.gob.mx | Government & Defense | MX |
| 2026-02-10 |  PT. Mitra Antar Tangguhmitratangguh.co.id | Professional Services | ID |
| 2026-02-04 |  megasilver.com.twmegasilver.com.tw | Technology | TW |
| 2026-01-31 | A all Data | Technology | |
| 2026-01-30 | W We will be back soon | Not Found | |
| 2026-01-29 |  b2motorsport.co.ilb2motorsport.co.il | Retail & E-Commerce | IL |
| 2026-01-28 | T Tahkout Group | Manufacturing | DZ |
| 2026-01-27 |  KSP TLM INDONESIAcooptlmindonesia.com | Financial Services | ID |
| 2026-01-27 |  FRUIT-BONTÉ Agroalimentairemda-agro.com | Agriculture and Food Production | FR |
| 2026-01-27 |  lenotech.com.phlenotech.com.ph | Technology | PH |
| 2026-01-27 |  COMPAGNIE FONCIÈRE PARISIENNEcfp.com | Financial Services | FR |
| 2026-01-27 |  skyegtours.comskyegtours.com | Hospitality | GB |
| 2026-01-26 | D Disuelas JC SAS | Manufacturing | CO |
| 2026-01-26 |  premmotors.compremmotors.com | Retail & E-Commerce | IN |
| 2026-01-26 |  namico.go.kenamico.go.ke | Government & Defense | KE |
| 2026-01-26 |  Jakarta Nanyang Schooljny.sch.id | Education | ID |
| 2026-01-22 |  STRONG WINGS LLPstrongwingshonda.com | Manufacturing | IN |
| 2026-01-20 |  www.coconutboard.gov.inwww.coconutboard.gov.in | Government & Defense | IN |
| 2026-01-19 |  Deck India Engineering Pvt. Ltddeckindia.com | Manufacturing | IN |
| 2026-01-18 |  GSM PORTAL TEKNOLOJİ HİZMETLERİ TİC. LTD. ŞTİgsmportal.com.tr | Technology | TR |
| 2026-01-17 |  Nafae Sanitaire S.a.r.lnafaesanitaire.com | Professional Services | MA |
| 2026-01-17 |  anfibius.netanfibius.net | Technology | ES |
| 2026-01-16 |  https://comercialautomotriz.comcomercialautomotriz.com | Manufacturing | EC |
| 2026-01-16 |  Grupo Roagruporoa.mx | Agriculture and Food Production | CO |
| 2026-01-15 |  Nordstrom Racknordstromrack.com | Retail & E-Commerce | US |
| 2026-01-14 |  Samson Equipmentsamsonequipment.com | Manufacturing | US |
| 2026-01-14 |  https://seha.org.saseha.org.sa | Healthcare | SA |
| 2026-01-14 |  Quick Safety Electricquicksafety.com.au | Manufacturing | AU |
| 2026-01-12 |  www.charoenchai.comwww.charoenchai.com | Agriculture and Food Production | TH |
| 2026-01-07 |  strategic-ts.comstrategic-ts.com | Technology | US |
| 2026-01-06 |  baja.gob.mxbaja.gob.mx | Government & Defense | MX |
| 2025-12-08 |  https://www.revnomix.comrevnomix.com | Technology | IN |
| 2025-11-27 | * **Rollingertec S.A. - Luxembourg** | Other | |
| 2025-11-23 |  Coral Clubes - Mexicofimexgroup.com | Hospitality | MX |
| 2025-10-24 |  Le MULTI LABORATOIRE LC2Alc2a.com | Manufacturing | MA |
| 2025-10-23 |  UniCursos, Brazilunicursos.com.br | Education | BR |
| 2025-10-23 |  FOOD & MUSIC MANAGEMENT SLfoodandmusic.es | Hospitality | ES |
| 2025-10-23 |  Al Rimal Groupalramalgroup.com | Agriculture and Food Production | AE |
| 2025-10-23 |  STAR LÉGUMESstarlegumes.ma | Agriculture and Food Production | MA |
| 2025-10-23 |  Qatargas and Tar Company, Iranqatargas.ir | Energy & Utilities | IR |