SFA Engineering Corporation (KR) reported a ransomware incident involving threat actor metaencryptor. The company, a South Korean high-tech engineering firm specializing in industrial automation, robotics, and manufacturing equipment for the semiconductor, OLED display, battery, and smart factory industries, experienced disruption due to the attack. #KoreaSouth
Incident Details
- Victim: SFA Engineering Corporation
- Sector: Manufacturing
- Country: KR
- Actor: metaencryptor
- Source: https://metacrpttdfpbm4qoxzcrqqgr6e6zafpazgxm72knmujw2mwvi34rwad.onion/0AFC:b4e5dcfb3b326b048e07e9eb243f13de/0AFC:e7a37dfd17dd56a4dbf0ace14ec1970c3803b2c7819d8b27b95efd14633411c040dd911a325f1324eb38cedd28917dcb
- Discovered: 2026-09-15T11:59:46.342220+00:00
- Published: 2026-09-15T11:59:30.965687+00:00
Information
- SFA Engineering Corporation is a South Korean high-tech engineering company specializing in industrial automation, robotics, and manufacturing equipment.
- The company provides advanced solutions for the semiconductor, OLED display, battery, and smart factory industries.
- It serves major global manufacturers.

Disclaimer: This post is based on public claims made by the ransomware group "metaencryptor". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.