Victim Saigon Industrial Service in Vietnam was targeted by the threat actor DragonForce in a ransomware attack, compromising their operational systems. The attack impacts the companyβs ability to supply, install, and maintain critical equipment in the oil and gas and electricity sectors. #Vietnam
Incident Details
- Victim: SAIGON INDUSTRIAL SERVICE
- Country: VN
- Actor: dragonforce
- Source: http://z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.onion/blog/?post_uuid=82284c7e-e9a8-469c-a69a-d628faf58552
- Discovered: 2025-11-05 12:53:13.116375
- Published: 2025-11-05 12:15:54.429379
Information
- Established in 2012 with over 10 years of experience in the oil, gas, and electricity industries.
- Specializes in supplying, installing, processing, maintaining, and repairing valves, pumps, and other equipment.
- Serves a diverse range of domestic partners including Petro Vietnam, BSR, PVGas, PTSC M&C, EVNGENCO2 TPC Can Tho, and EVNGENCO3 TPC Phu My.
- Provides services to international clients such as Ansaldo Energia, Clyde Bergeman, Petroseal, Enertork, Alco valve, VESL, MSD, VIAR, Firsa, Goodwin, PBV, BFE, DHV Valve, and others.

Disclaimer: This post is based on public claims made by the ransomware group "dragonforce". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.