The ransomware claim alleges that Jordan India Fertilizer Company (JIFCO) was breached by the threat actor netrunner, who purportedly encrypted systems and exfiltrated data from the JV formed by IFFCO and Jordan Phosphates Mines Company (JPMC). The attack could disrupt operations at the Eshidiya phosphate plant and affect the JV’s 1500 tonnes per day P2O5 capacity in Jordan. #jordan
Incident Details
- Victim: Jordan India Fertilizer Company
- Sector: Agriculture and Food Production
- Country: JO
- Actor: netrunner
- Source: http://netrunrsb3bivj5gnwajzxlig5qkteb6edgthxj7fmsvhkzxtwfxwaad.onion/view/jifco.co
- Discovered: 2026-04-03 20:22:16.538961
- Published: 2026-04-03 20:22:02.302429
Information
- Netrunner identified as the actor behind the ransomware incident.
- Indian Farmers Fertiliser Cooperative (IFFCO) and Jordan Phosphates Mines Company Ltd (JPMC) formed a limited liability joint venture named Jordan India Fertiliser Company (JIFCO) on March 6, 2008, in Amman, Jordan.
- The company was established under the “Free Zone” system to set up a phosphoric acid plant at Eshidiya, Jordan.
- Planned plant capacity of 1,500 tonnes per day P2O5.
- Equity split: IFFCO and its affiliates hold 52%; JPMC holds 48%.
Disclaimer: This post is based on public claims made by the ransomware group "netrunner". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.