cyber.hendryadrian.com
Ransom Monitor · ransomware.live

DragonForce Claims Ransomware Attack on Romania’s STEP Oiltools

· Original article ↗

Summary

Ransomware.live records a dragonforce claim involving Romania-based STEP Oiltools, including claimed disruption to operations. The post says the information is unconfirmed.

Key points

  • The named victim is STEP Oiltools, a company based in Romania.
  • The post attributes the ransomware claim to dragonforce and links it to the actor’s onion-site post.
  • The post describes disruption to operations, but says the claim’s accuracy could not be confirmed.
  • The record lists discovery and publication dates of July 12, 2026.

Article Details

Victim
STEP Oiltools
Encryption Status
Unknown; the article reports a ransomware group claim but does not confirm encryption.
Exfiltration Status
Unknown; the article does not confirm exfiltration.
Ransom Demand
Not disclosed
Leak Status
A ransomware group claim is reported, but the article does not confirm that data was leaked or published.

Threat Actors

DragonForceThe article attributes a ransomware claim concerning STEP Oiltools to dragonforce, while stating that the claim's accuracy could not be confirmed.

Countries

RomaniaSTEP Oiltools in Romania, a leading global solids control and drilling waste management provider, reported a ransomware incident attributed to the dragonforce threat actor.

Industries

Civil engineeringThe claim involved disruption impacting the company’s operations serving oil and gas and civil engineering customers in Romania.EnergySector: EnergyOil and gasThe claim involved disruption impacting the company’s operations serving oil and gas and civil engineering customers in Romania.

Related Articles