The ransomware claim alleges that the threat actor Tengu targeted Star Légumes, a wholesale supplier of fruits, vegetables, spices, and dried seeds based in Casablanca, Morocco. The attack potentially disrupted the company’s operations and compromised sensitive business data. #Morocco
Incident Details
- Victim: STAR L,ÉGUMES
- Country: MA
- Actor: tengu
- Source: http://longcc4fqrfcqt5lzceutylaxir6h66fp6df3oin6mvwvz6pfdbxc6qd.onion/blog/0f09749244704dd7eda6e563ddd286eb4bd7ab0138dfefbc93a237c6179c0b21/
- Discovered: 2025-10-23 14:55:26.250651
- Published: 2025-10-23 14:55:06.122089
Information
- Star Legumes is a ransomware victim.
- Operates in Morocco, specifically in Casablanca and surrounding areas.
- Provides wholesale services for fruits, vegetables, spices, and dried seeds.
- The actor responsible is Tengu.

Disclaimer: This post is based on public claims made by the ransomware group "tengu". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.