FOG Ransomware Group Leaks Source Code of Three French Organizations

**Executive summary:** The FOG ransomware group publicly leaked stolen data and source code from three French organizations (Omydoo, Ayomi.fr, ADULLACT) after unsuccessful ransom negotiations; the group uses RDP brute-force and compromised VPN credentials for access, exfiltrates data with tools like MEGAsync and FileZilla, encrypts files (appending .fog/.flocked), disables Defender and deletes backups, and employs double-extortion with average demands around $220,000—underscoring significant operational and reputational risk to victims and the need for stronger defensive measures.