Ransom! SFA Engineering Corporation (SEP-2026)

SFA Engineering Corporation (KR) reported a ransomware incident involving threat actor metaencryptor. The company, a South Korean high-tech engineering firm specializing in industrial automation, robotics, and manufacturing equipment for the semiconductor, OLED display, battery, and smart factory industries, experienced disruption due to the attack. #KoreaSouth

Incident Details

  • Victim: SFA Engineering Corporation
  • Sector: Manufacturing
  • Country: KR
  • Actor: metaencryptor
  • Source: https://metacrpttdfpbm4qoxzcrqqgr6e6zafpazgxm72knmujw2mwvi34rwad.onion/0AFC:b4e5dcfb3b326b048e07e9eb243f13de/0AFC:e7a37dfd17dd56a4dbf0ace14ec1970c3803b2c7819d8b27b95efd14633411c040dd911a325f1324eb38cedd28917dcb
  • Discovered: 2026-09-15T11:59:46.342220+00:00
  • Published: 2026-09-15T11:59:30.965687+00:00

Information

  • SFA Engineering Corporation is a South Korean high-tech engineering company specializing in industrial automation, robotics, and manufacturing equipment.
  • The company provides advanced solutions for the semiconductor, OLED display, battery, and smart factory industries.
  • It serves major global manufacturers.

Disclaimer: This post is based on public claims made by the ransomware group "metaencryptor". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.

monitored by: ransomware.live