A newly emerged ransomware group identified as Tengu has claimed responsibility for a cyberattack targeting STAR LÉGUMES, a Moroccan agricultural wholesale company based in Casablanca. The organization, which specializes in the distribution of fruits, vegetables, spices, and dried seeds, was recently listed on Tengu’s dark web blog alongside other international victims.
The Tengu group’s post describes STAR LÉGUMES’ business operations and includes a brief profile of the company, similar to the structure observed in other listings attributed to the group. The post has garnered over 1,000 views since publication, with a countdown timer set to zero, suggesting that the data exposure phase may already be active.
The blog post, which surfaced recently, includes 13 images of internal documents purportedly belonging to the organization.
Disclaimer: This report is based on open-source intelligence (OSINT) and dark web monitoring. CyHawk Africa has not independently verified the authenticity of the claimed data. The report is intended solely for cybersecurity awareness and situational intelligence purposes.

