Fortox Listed in Aoqin Claim

Ransomware.live registered an Aoqin claim against Fortox Security Group, a private security company based in Colombia, and attributed 362 GB of exfiltrated data to it. The listing itself warns that the claim should be treated cautiously until independently verified, so there is no public confirmation of an intrusion or an actual leak by Fortox.

What did the ransomware monitors record?

The monitors cited in the available material recorded that Aoqin claimed Fortox Security Group as a victim and attached a report of 362 GB of data. That attribution appears in Ransomware.live, which identifies the Colombian company in its register, and also in Brandefense ATLAS, which listed it among the group’s claimed victims.

How far does that signal go?

Based on the information available, the signal is limited to a claim posted on ransomware intelligence sites. Brandefense ATLAS clarified that appearing on a leak site means the group claimed the company, not that the breach has been confirmed. In other words, the public evidence now supports an Aoqin attribution against Fortox, but not proof of the incident.

What is still missing to confirm it?

An independent verification is still needed to confirm the intrusion, the exfiltration, or any eventual publication of data. There is also no confirmation in the material from Fortox, Colombian authorities, or any other independent source. HookPhish appears among the available sources with a note on the case, but the base material does not provide additional validation of the incident.