The ransomware claim involves Astra Otoparts and PT. Inti Ganda Perdana in Indonesia, with the threat actor identified as thegentlemen. The attack impacts a company with $20 billion USD in revenue that specializes in automotive components and manufacturing, aiming to disrupt its operations in Indonesia.
Incident Details
- Victim: Astra Otoparts / PT. Inti Ganda Perdana
- Country: ID
- Actor: thegentlemen
- Source: http://tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion
- Discovered: 2025-10-03 19:51:16.123587
- Published: 2025-10-03 19:01:03.000000
Information
- Astra Otoparts / PT. Inti Ganda Perdana was targeted in a ransomware attack.
- The actor responsible for the attack is identified as thegentlemen.
- The company is based in Indonesia and operates in the manufacturing sector, specializing in automotive components.
- The companyβs revenue is approximately 20 billion USD.
- Astra Otoparts trades in automotive components for both domestic and international markets, including Asia, the Middle East, and Africa.
- The company also manufactures metal, automotive components, and plastics.
- PT. Inti Ganda Perdana primarily produces rear axles and propeller shafts.
- The companyβs mission is to become a reliable manufacturer of drive shafts and axles.
- Its vision is to attain a competitive advantage in the global market.

Disclaimer: This post is based on public claims made by the ransomware group "thegentlemen". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.