zerolockersec ransomware group lists www.dgcx.ae on its leak site

• Ransomware group: zerolockersec
• Country: United Arab Emirates
• Announcement date: March 25, 2025

The Dubai Gold and Commodities Exchange listed by zerolockersec

The entity associated with the domain www.dgcx.ae has been listed on a leak site by the ransomware group zerolockersec. This announcement, which surfaced on March 25, 2025, marks a significant claim regarding the security posture of the institution.

Details of the claimed attack

The threat actor known as zerolockersec claimed to have leaked data belonging to www.dgcx.ae on March 25, 2025. According to the announcement made by the group, the claimed attack date is also March 25, 2025. While the group has made this public claim, information regarding this specific group remains limited in the public domain.

Ransomware groups often utilize leak sites to exert pressure on their victims through a tactic known as double extortion. In these scenarios, attackers not only encrypt an organization's data to disrupt operations but also threaten to publish sensitive information on public forums if a ransom is not paid. This method aims to maximize leverage by threatening the target's reputation and regulatory standing.

Data involved in the claim

Regarding the specifics of the breach, the announcement specifies that the leaked data size is 300 MB. However, there is no detailed information regarding the content of the leaked data, and no screenshot was provided by the threat actor to verify the contents. The listing names no specific data types.

About the Dubai Gold and Commodities Exchange

The Dubai Gold and Commodities Exchange (DGCX) is the leading derivatives exchange in the Middle East. The institution provides trading opportunities across various asset classes, including commodities, currencies, and equity indices.

Analysis and potential implications

This claim may indicate potential vulnerabilities in the institution's data security processes. Until the content of the leaked data is clarified, secondary risks such as identity theft or targeted phishing attacks against employees and customers may arise. Organizations facing such threats often prioritize monitoring for unauthorized access and enhancing their endpoint detection capabilities to mitigate further impact.

Furthermore, the institution may face legal obligations under the data protection regulations in the United Arab Emirates. Depending on the nature of the data, regulatory bodies often require timely notification and comprehensive forensic investigations to ensure compliance with local laws.

Because there is insufficient data regarding the threat actor's motivation and methods, the severity and long-term impacts of the incident remain uncertain. In the broader landscape of cyber threats, organizations in the financial and exchange sectors typically focus on robust encryption, multi-factor authentication, and rigorous access controls to defend against such intrusions. The lack of clarity regarding the group's specific methods makes it difficult to determine the exact nature of the breach at this time.