Everest, a threat actor, has claimed to have compromised Air Arabia’s systems in a ransomware attack, potentially risking sensitive customer and operational data. The attack has impacted the United Arab Emirates.
Incident Details
- Victim: Air Arabia
- Country: AE
- Actor: everest
- Source: http://ransomocmou6mnbquqz44ewosbkjk3o5qjsl3orawojexfook2j7esad.onion/news/airarabia
- Discovered: 2025-10-25 18:43:03.543804
- Published: 2025-10-25 18:42:43.761108
Information
- Air Arabia is a low-cost airline that began operations in 2003 and is based in Sharjah, United Arab Emirates.
- The airline offers flights to over 170 destinations across the Middle East, North Africa, Asia, and Europe.
- Besides passenger transportation, Air Arabia has expanded into travel management, tourism, and hospitality through various subsidiaries.
- The airline operates a fleet of Airbus A320 aircraft.
- It is the first publicly listed airline in the Middle East and has maintained profitability since its second year of operation.
Disclaimer: This post is based on public claims made by the ransomware group "everest". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.