The malware group Sinobi has claimed a ransomware attack targeting Sanhua International, a leading provider of eco-friendly refrigeration and air conditioning components. The attack affects operations in China, where Sanhua is based. #China
Incident Details
- Victim: SANHUA INTERNATIONAL
- Country: CN
- Actor: sinobi
- Source: http://sinobi6ftrg27d6g4sjdt65malds6cfptlnjyw52rskakqjda6uvb7yd.onion/leaks/68f7ce3188b6823fa2be78e0
- Discovered: 2025-10-21 20:11:33.752800
- Published: 2025-10-21 18:17:21.678000
Information
- Sanhua International is committed to offering eco-friendly products.
- In 2017, they introduced the Green Tech Line of refrigeration and air conditioning components at the AHR Expo in Las Vegas.
- This line is designed for use with natural refrigerants such as R290 (propane), R600a (isobutane), and R744 (CO2).
- Recent mandates from the U.S. EPA are prompting manufacturers to develop greener refrigeration and air conditioning solutions.
- Sanhua collaborates with leading manufacturers by providing high-quality system components that are hydrocarbon and CO2 ready, including valves, controllers, transducers, filter driers, and micro-channel heat exchangers.
Disclaimer: This post is based on public claims made by the ransomware group "sinobi". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.