Ransom! www.wilmar.co.id

The threat actor Stormous claims to have gained VPN access to the internal network of www.wilmar.co.id, a company based in Indonesia, and has deployed ransomware to compromise the organization’s data. The attack has impacted Indonesia.

Incident Details

  • Victim: www.wilmar.co.id
  • Country: ID
  • Actor: stormous
  • Source:
  • Discovered: 2025-11-06 22:57:01.330003
  • Published: 2025-11-06 22:56:59.634922

Information

  • The victim is Wilmar, an Indonesian company.
  • The threat actor is Stormous.
  • VPN access to the company’s internal network has been provided to the attacker.

Disclaimer: This post is based on public claims made by the ransomware group "stormous". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.

monitored by: ransomware.live