BlackNevas ransomware (MEFA Endüstri, MEFA Group—mefagroup.com.tr, Milkrun logistics, Efachem, and Ecopolymer) claimed to have encrypted a list of files and demanded payment for cooperation via Telegram or email. The incident affected companies within the MEFA industrial ecosystem in Turkey. #Turkey
Incident Details
- Victim: Mefa Group www.mefagroup.com.tr / MEFA End,üstri www.mefaendustri.com / and (Efachem, Eco…
- Sector: Manufacturing
- Country: TR
- Actor: blacknevas
- Source: http://ctyfftrjgtwdjzlgqh4avbd35sqrs6tde4oyam2ufbjch6oqpqtkdtid.onion/0f3835e6-8681-4baa-8b8e-1706d91e7ec4
- Discovered: 2026-09-08T07:23:58.260321+00:00
- Published: 2026-08-25T15:29:52+00:00
Information
- Turkish industrial group headquartered in Ankara, founded in 2006.
- Operates across industrial manufacturing, plastics, rubber, processing, and logistics.
- Has more than 115,000 m² of production space, over 2,000 employees, and facilities in Turkey, Romania, and Poland.
- Main focus areas include the automotive industry, white goods, and related sectors.
- Milkrun is the logistics division, providing integrated smart logistics solutions with an emphasis on efficiency, digitalization, and sustainability.
- Efachem specializes in plastic and rubber compounds, developing customized formulas for customer needs and production compatibility.
- Ecopolymer focuses on raw materials processing and recycling technologies, transforming plastic waste into high-performance materials within a circular economy.
- These companies operate as one ecosystem covering production, raw materials, processing, and logistics.
Disclaimer: This post is based on public claims made by the ransomware group "blacknevas". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.