The ransomware claim identifies tengu as the threat actor behind an attack on Shora Advisory, a Morocco-based network of accounting, consulting, and auditing firms. The incident targets Shora Advisory across major Moroccan cities, disrupting its financial management, accounting, legal and tax services #Morocco
Incident Details
- Victim: www.shora.ma
- Sector: Not Found
- Country: MA
- Actor: tengu
- Source: http://longcc4fqrfcqt5lzceutylaxir6h66fp6df3oin6mvwvz6pfdbxc6qd.onion/blog/4821b80070a6e4cec911a0f632e4702e30d7342375f19a0ad50809abd1ebc631/
- Discovered: 2026-02-20 08:19:52.699022
- Published: 2026-02-20 08:19:30.053790
Information
- Network of accounting, consulting, and auditing firms located in major cities across Morocco
- Dedicated to providing high value-added services
- Offers financial management consulting
- Provides accounting expertise
- Provides legal and tax expertise
- Delivers training
- Focuses on proximity to clients and respects their specific needs and industry-related constraints
- Aims to combine expertise with clients to foster mutual success
Disclaimer: This post is based on public claims made by the ransomware group "tengu". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.