INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Hyflock Publishes New Victim IGPL

| 2026-10-13 17:14 CRITICAL LOW RANSOMWARE & EXTORTION
JSON
Executive Summary
AI-generated
On October 10, 2026, a cyber attack was launched against Indian Petrochemicals Group Limited (IGPL), targeting its core manufacturing facility in Maharashtra. The attackers exploited the "FortiBleed" vulnerability to gain access to IGPL's FortiOS SSL-VPN credentials and exposed them via DNS records. This compromise affected two employees with third-party employee credentials, resulting in exposure of 118 passwords and critical FortiBleed vulnerabilities. As a result of this attack, IGPL's annual revenue was impacted by fluctuations in international chemical raw material prices, leading to a net profit margin of around 3.94% over the past 12 months.
Technical Mitigations AI-generated
• Apply the vendor fix for CVE-2022-40684 and treat internet-facing systems that were not patched in time as potentially compromised until verified. • Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Technical Observables Login Required
Indicators of Compromise (IoCs) Protected

Raw threat telemetry, malicious IP addresses, file hashes, and direct VirusTotal correlation are restricted to authenticated users.

Sign In to View 2 IoCs Create Free Account
adfe8f••••••••••••••••••••••••••
4ace3a••••••••••••••••••••••••••
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
CVE-2022-40684CVE-2022-40684
Target & Sectors
IN
energyenergy transportationtransportation manufacturingmanufacturing healthhealth financefinance retailretail
Incident Timeline
‎2026/10/10
Threat actors used an unknown vector to target Hyflock on October 10, 2026.
organisation UTC
Discovered 2026-10-13 17:14 UTC Est. attack date 2026-10-10 Country Sector Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology…
‎2026/10/13
Threat actors used an unknown vector to target Hyflock, a victim in the IGPL incident.
organisation UTC
Discovered 2026-10-13 17:14 UTC Est. attack date 2026-10-10 Country Sector Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology…
‎2026/10/13
Threat actors used the "FortiBleed" vulnerability (CVE-2022-40684) to expose FortiOS SSL-VPN credentials of IGPL's Taloja complex, a major single-location PAN manufacturing facility.
organisation IGPL
Description: Company Profile & Core Business • Overview: Established in 1988 and headquartered in Mumbai, India, IGPL operates its core manufacturing facility within the Taloja chemical industrial corridor in Maharashtra.
organisation Taloja
Description: Company Profile & Core Business • Overview: Established in 1988 and headquartered in Mumbai, India, IGPL operates its core manufacturing facility within the Taloja chemical industrial corridor in Maharashtra.
organisation the National Stock Exchange of India
The company is a publicly traded, international petrochemical products manufacturer listed on both the National Stock Exchange of India (NSE) and the Bombay Stock Exchange (BSE).
organisation the Bombay Stock Exchange
The company is a publicly traded, international petrochemical products manufacturer listed on both the National Stock Exchange of India (NSE) and the Bombay Stock Exchange (BSE).
organisation BSE
The company is a publicly traded, international petrochemical products manufacturer listed on both the National Stock Exchange of India (NSE) and the Bombay Stock Exchange (BSE).
organisation Microsoft 365
…PjwkZL3ppq-vTyUsI v=spf1 include:transmail.net.in include:secureserver.net -all Cloud / SaaS Services Detected Zoho Campaigns Leak Screenshot: Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
organisation Infostealer
…Compromised Users: 2 Third Party Employee Credentials: 7 External Attack Surface: 3 Exposure Report by ParanoidLab 118 Passwords 18 critical FortiBleed Exposure Detected This domain's FortiOS SSL-VPN credentials were exposed via the "FortiBleed" leak ( CVE-2022-40684 ).
organisation HudsonRock Compromised Employees
…Compromised Users: 2 Third Party Employee Credentials: 7 External Attack Surface: 3 Exposure Report by ParanoidLab 118 Passwords 18 critical FortiBleed Exposure Detected This domain's FortiOS SSL-VPN credentials were exposed via the "FortiBleed" leak ( CVE-2022-40684 ).
organisation ParanoidLab
…Compromised Users: 2 Third Party Employee Credentials: 7 External Attack Surface: 3 Exposure Report by ParanoidLab 118 Passwords 18 critical FortiBleed Exposure Detected This domain's FortiOS SSL-VPN credentials were exposed via the "FortiBleed" leak ( CVE-2022-40684 ).
organisation CVE-2022
…Compromised Users: 2 Third Party Employee Credentials: 7 External Attack Surface: 3 Exposure Report by ParanoidLab 118 Passwords 18 critical FortiBleed Exposure Detected This domain's FortiOS SSL-VPN credentials were exposed via the "FortiBleed" leak ( CVE-2022-40684 ).
data_breach 2 Party Employee Credentials
…Compromised Users: 2 Third Party Employee Credentials: 7 External Attack Surface: 3 Exposure Report by ParanoidLab 118 Passwords 18 critical FortiBleed Exposure Detected This domain's FortiOS SSL-VPN credentials were exposed via the "FortiBleed" leak ( CVE-2022-40684 ).
organisation Phthalic Anhydride
• Core Products: The company primarily specializes in the production of Phthalic Anhydride (PAN).
organisation PAN
• Core Products: The company primarily specializes in the production of Phthalic Anhydride (PAN).
organisation Maleic Anhydride
Leveraging economies of scale, it also recovers valuable by-products such as Maleic Anhydride and Benzoic Acid, and further extends its downstream value chain to manufacture plasticizers like Di-Ethyl Phthalate (DEP).
organisation Di-Ethyl Phthalate
Leveraging economies of scale, it also recovers valuable by-products such as Maleic Anhydride and Benzoic Acid, and further extends its downstream value chain to manufacture plasticizers like Di-Ethyl Phthalate (DEP).
organisation DEP
Leveraging economies of scale, it also recovers valuable by-products such as Maleic Anhydride and Benzoic Acid, and further extends its downstream value chain to manufacture plasticizers like Di-Ethyl Phthalate (DEP).
organisation PVC
IGPL's products are widely supplied to leading global and domestic manufacturers across dozens of backbone industries, including paints, coatings, plastics, flexible PVC, unsaturated polyester resins (UPR), automotive components, construction chemicals, and fragrances.
organisation UPR
IGPL's products are widely supplied to leading global and domestic manufacturers across dozens of backbone industries, including paints, coatings, plastics, flexible PVC, unsaturated polyester resins (UPR), automotive components, construction chemicals, and fragrances.
organisation Financial Performance &
Financial Performance & Annual Revenue
organisation TTM
• Recent Revenue Trends: As of 2026, its trailing twelve months (TTM) rolling total revenue sits at approximately INR 20.73 billion (around USD 247 million).
organisation INR 17.4 billion
Profitability: The company has maintained a net profit margin of around 3.94% over the past 12 months, with its current market capitalization valued between INR 17.4 billion and INR 17.6 billion.
organisation DNS Records
DNS Records: The following DNS records were found for the victim's domain. igpetro-com.mail.protection.outlook.com.
organisation DNS
DNS Records: The following DNS records were found for the victim's domain. igpetro-com.mail.protection.outlook.com.
Tactical Metrics
Metrics
infrastructure
‎Microsoft 365
Affected Product
…PjwkZL3ppq-vTyUsI v=spf1 include:transmail.net.in include:secureserver.net -all Cloud / SaaS Services Detected Zoho Campaigns Leak Screenshot: Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
Metrics
data_breach
2
Party Employee Credentials
…Compromised Users: 2 Third Party Employee Credentials: 7 External Attack Surface: 3 Exposure Report by ParanoidLab 118 Passwords 18 critical FortiBleed Exposure Detected This domain's FortiOS SSL-VPN credentials were exposed via the "FortiBleed" leak ( CVE-2022-40684 ).
Intelligence Sources
Ransomware Live 2026-10-13