apt73 ransomware group lists whessoe.com.my on its leak site

• Ransomware group: apt73
• Country: Malaysia
• Sector: Manufacturing
• Announcement date: April 27, 2026

A new data leak involving a Malaysian engineering firm

The ransomware group known as apt73 has listed the Malaysian organization whessoe.com.my on its leak site. According to the announcement made on April 27, 2026, the group claims to have successfully executed an attack against the company, resulting in a significant data leak. The group alleges that the breach occurred on the same day the announcement was posted.

Ransomware attacks often involve a tactic known as double extortion. In these scenarios, threat actors do not merely encrypt a victim's systems to disrupt operations; they also exfiltrate sensitive information. The goal is to pressure the organization into paying a ransom by threatening to publish the stolen data on public leak sites. This method increases the leverage of the attackers, as the threat of a public data leak can cause irreparable reputational and legal damage, even if the company can restore its systems from backups.

Details of the claimed breach

The apt73 group claims to have obtained a variety of sensitive materials belonging to whessoe.com.my. The group alleges that they have successfully accessed internal documents and financial records. According to the announcement, the total volume of the data claimed to be leaked is 823 MB. No information was provided regarding the specific number of files involved or the specific amount of a ransom demand.

Based on the information provided by the group, the leaked content is expected to include several types of sensitive corporate information. The announcement and associated screenshots suggest that the following data types are involved:

• Internal correspondence
• Financial documents
• Technical inspection forms
• VPN configuration data

The presence of such diverse data types, ranging from administrative emails to technical configurations, highlights the potential breadth of the intrusion. When attackers gain access to internal communications and financial records, they gain insight into the company's business operations and fiscal health.

About Whessoe Engineering (Malaysia) Sdn Bhd

Whessoe Engineering (Malaysia) Sdn Bhd is an engineering company based in Malaysia. The company specializes in the design and construction of storage tanks and related engineering solutions, particularly for the oil, gas, and petrochemical industries. Given its specialization in critical infrastructure sectors like oil and gas, the company plays a role in complex industrial engineering environments.

Potential impact and industry considerations

This incident may jeopardize the company's operational continuity and trade secrets. The disclosure of technical documents and internal communications can provide competitors or other malicious actors with sensitive insights into the company's proprietary processes. Furthermore, the leaked VPN configuration data is particularly concerning, as it could increase the risk of secondary attacks targeting the company's network infrastructure by providing attackers with a roadmap for further unauthorized access.

The exposure of such data may also trigger risks of identity theft or targeted phishing attacks aimed at employees and customers. Additionally, the company may face legal obligations under Malaysian data protection regulations following the disclosure of this information. Public information regarding the apt73 group remains limited, making it difficult to attribute the attack or understand the group's full capabilities.

For organizations operating in the engineering and industrial sectors, maintaining robust defensive postures is essential. Common defensive steps include implementing multi-factor authentication (MFA) across all remote access points, such as VPNs, to mitigate the risk of credential theft. Organizations should also prioritize regular security awareness training to help employees recognize phishing attempts and implement strict data loss prevention (DLP) strategies to monitor and protect sensitive technical and financial files. Regular audits of network configurations and access logs can also help identify unauthorized movements within the network before data exfiltration occurs.