Prasaga listed on fog ransomware leak site
The technology company Prasaga has been listed on the leak site of the threat actor known as fog.
- Published
- 2 min read
- 2 min read
- Ransomware group: fog
- Country: United States
- Sector: Technology
- Announcement date: February 4, 2025
Prasaga listed on fog ransomware leak site
The technology company Prasaga has been listed on the leak site of the threat actor known as fog. According to the announcement made on the group's platform, the organization has been targeted in a cyberattack that involves the alleged theft of sensitive information.
Details of the claimed attack
The fog group listed data allegedly belonging to Prasaga on its leak site. While the announcement was officially posted on February 4, 2025, the group claims the attack occurred on January 30, 2025. The threat actor asserts that they have successfully accessed the organization's GitLab source codes. The information provided by the group indicates that the data in question is 1 GB in size and is being shared via a torrent link. No information was provided regarding a ransom demand.
Affected data types
- Source code
About Prasaga
Prasaga is a technology company based in the United States that develops blockchain technologies and decentralized network solutions. The company focuses primarily on scalable blockchain architectures and digital asset management.
Impact and security implications
This incident may have negative impacts on the organization's intellectual property rights and trade secrets. The exposure of source codes could lead to the identification of vulnerabilities in the organization's software infrastructure and potentially result in secondary attacks. As a US-based entity, legal processes under data breach notification obligations and relevant state laws may be observed.
Public information about the fog group is limited. Given the double extortion method, risks to the organization's operational continuity may arise. Double extortion is a common tactic used by ransomware groups where, in addition to encrypting an organization's data to disrupt operations, the attackers also steal sensitive information to threaten its public release if a ransom is not paid.
In such scenarios, organizations often face significant pressure to maintain business continuity while managing the legal and reputational fallout of a data leak. For companies in the technology sector, particularly those dealing with blockchain and decentralized solutions, the integrity of their codebase is paramount. The exposure of proprietary logic and architectural details can compromise the trust of users and partners alike.
To mitigate such risks, organizations typically implement various defensive measures. These include robust access controls for version control systems like GitLab, multi-factor authentication, and continuous monitoring of network traffic to detect unauthorized data exfiltration. Regular security audits and penetration testing are also essential to identify and patch vulnerabilities before they can be exploited by threat actors. As seen in this case, the potential for secondary attacks following a source code leak highlights the necessity of a comprehensive incident response plan that accounts for both operational recovery and data protection.