Mallox Group Claims Ransomware Attack on FICCI

**Executive Summary:** Cyble Research & Intelligence Labs reports that the Mallox ransomware group claimed a February 23, 2023 compromise of FICCI and released ~1.28 GB of compressed data containing financial records, PII, bank statements, invoices, and vendor/consultant information; the report includes technical analysis of Mallox (loader-based distribution, AES-encrypted DLLs obfuscated with IntelliLock), MITRE ATT&CK mappings, extensive IoCs (many hashes and two attacker IPs), and recommended ransomware mitigations.