Threat actors associated with krybit targeted ersa.com.py in Paraguay with a ransomware attack, aiming to disrupt operations and impact availability of company systems. The ransomware claim affects Paraguay #Paraguay
Incident Details
- Victim: ersa.com.py
- Sector: Manufacturing
- Country: PY
- Actor: krybit
- Source: http://krybitqsdzwmhnitvwuhvsntfgf2wrhxveyxroxpc44c6gkft2cqldyd.onion/blog/21d76746113e42307fe8fe34abb2cf5d6582549feab72e9293c63bedfd78b0ad/
- Discovered: 2026-06-17T10:23:15.395969+00:00
- Published: 2026-06-17T10:22:59.047364+00:00
Information
- ERSA (Enrique Remmele S.A.C.I.) is a 100% Paraguayan industrial company founded in 1928.
- It was originally established for the manufacture of soaps and has since grown into a long-standing industrial enterprise in Paraguay.
Disclaimer: This post is based on public claims made by the ransomware group "krybit". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.