Ransomware Group:  
Dunghill



Sponsored by Hudson RockUse Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business


Sites | Activity | Worldmap | Victims (17)


Sites

Title Available Last Visit FQDN Screenshot
Dunghill Leak - Details 🔴 2024-07-23 15:54:32.393505 p66slxmtum2ox4jpayco6ai3qfehd5urgrs4oximjzklxcol264driqd.onion N/A
Dunghill Leak - Details 🟢 2024-12-07 07:31:41.886466 nsalewdnfclsowcal6kn5csm4ryqmfpijznxwictukhrgvz2vbmjjjyd.onion 📸

Activity over time

Worldmap

17 Victims

BO flag

Nuevatel 

Company logo
Ransomware Group:

Discovery Date: 2024-07-15 23:46

Nuevatel PCS de Bolivia S.A., better known as VIVA, is a Bolivian wireless network operator and telecommunications company. It was founded in 1999. It is currently among the largest companies in the country. Viva is the third-largest wireless carrier in Bolivia, with a market share of 12.9%

Victim:   |  Group: 
US flag

Nexperia 

Company logo
Ransomware Group:

Discovery Date: 2024-04-10 21:05

Sector: Technology
Headquartered in the Netherlands, Nexperia is a global semiconductor company with a rich European history and more than 15,000 employees in Europe, Asia and the United States. As a leading expert in the design and manufacture of mission-critical semiconductors, Nexperia components provide the basic functionality for virtually every electronic device in the world - from automotive and industrial to mobile and consumer applications.

Victim:   |  Group: 
TW flag

Array Networks 

Company logo
Ransomware Group:

Discovery Date: 2024-02-29 15:07

Sector: Technology
Array Networks is an American networking hardware company. It sells network traffic encryption tools. Was founded in 2000 by Lawrence Lu and is based in Milpitas, California. It received funding from the venture capital firm U.S. Venture Partners and the private equity firm H&Q Asia Pacific. On May 13, 2009, Array Networks became the first non-Taiwan company to be listed on the Taiwan Stock Exchange. The company sold 54 million shares that had a total value of about $79 million. In 2009, 43% of the company's market share was in China, and its main product type sold there consisted of SSL VPN devices.

Victim:   |  Group: 
GB flag

Go-Ahead Group 

Company logo
Ransomware Group:

Discovery Date: 2023-12-05 14:51
Estimated Attack Date: 2023-09-26

Sector:
Go-Ahead Group plc is a passenger transport company based in Newcastle upon Tyne, England. The majority of its operations are within the United Kingdom, Ireland, Singapore, Norway, and Germany. Go-Ahead diversified into ground handling services at various British airports via the acquisition of Gatwick Handling International, British Midland, and Reed Aviation. Acquired numerous other British transport companies, including Thames Travel, Carousel Buses, Hedingham, Anglian Bus, and HC Chambers & Son. It was contracted to operate bus and rail services in Germany and Singapore. During January 2023, it was announced that Go-Ahead was expanding into the Australian market via the U-Go Mobility joint venture with the engineering company UFL.

Victim:   |  Group: 
 flag

Supply Technology 

Company logo
Ransomware Group:

Discovery Date: 2023-12-05 14:51
Estimated Attack Date: 2023-11-07

Sector:
Supply Technologies, a subsidiary of ParkOhio(NASDAQ:PKOH), specializes in supplier selection and management, planning, implementing, managing the physical flow of product for world-class international manufacturing companies, and servicing customers in the various markets. Supply Technologies has expertise in global sourcing with more than 7,500 suppliers worldwide and ensures that you’ll get the exact parts you need, on time, at the best quality and at the right price.

Victim:   |  Group: 
 flag

Robins & Morton 

Company logo
Ransomware Group:

Discovery Date: 2023-12-05 14:51
Estimated Attack Date: 2023-09-26

Sector:
Robins and Morton is a company operating as a construction firm. It specializes in planning and design, construction management, multiple delivery methods, self-performed work, and green building. The company serves healthcare, government, and commercial markets. In the past ten years alone, it have completed nearly $10 billion in projects. These projects vary from major new hospitals and complex renovations, to hospitality projects and a variety of other commercial work.

Victim:   |  Group: 
 flag

CannonDesign 

Company logo
Ransomware Group:

Discovery Date: 2023-12-05 14:51
Estimated Attack Date: 2023-09-26

Sector:
CannonDesign is a global architecture, engineering and consulting practice that provides services for a range of project types, including hospitals and medical centers, corporate headquarters and commercial office buildings, higher education and PK-12 education facilities, hotels and hospitality, mixed-use, sports facilities, and science and research buildings. In 2017 and 2019, Fast Company named CannonDesign one of the 10 most innovative architecture firms in the world.

Victim:   |  Group: 
 flag

Robins & Morton 

Company logo
Ransomware Group:

Discovery Date: 2023-09-26 23:36

Sector:
Robins and Morton is a company operating as a construction firm. It specializes in planning and design, construction management, multiple delivery methods, self-performed work, and green building. The company serves healthcare, government, and commercial markets. In the past ten years alone, it have completed nearly $10 billion in projects. These projects vary from major new hospitals and complex renovations, to hospitality projects and a variety of other commercial work.

Victim:   |  Group: 
 flag

CannonDesign 

Company logo
Ransomware Group:

Discovery Date: 2023-09-26 23:36

Sector:
CannonDesign is a global architecture, engineering and consulting practice that provides services for a range of project types, including hospitals and medical centers, corporate headquarters and commercial office buildings, higher education and PK-12 education facilities, hotels and hospitality, mixed-use, sports facilities, and science and research buildings. In 2017 and 2019, Fast Company named CannonDesign one of the 10 most innovative architecture firms in the world.

Victim:   |  Group: 
 flag

Roper & Vertafore 

Company logo
Ransomware Group:

Discovery Date: 2023-09-26 22:10

Sector:
Vertafore is a Denver-based insurance technology company. It has developed various software for insurance companies, such as content management and workflow software, insurance knowledge base, data and analytics. It's insurance management software solutions allow participants in the insurance distribution channel to adapt to an evolving insurance industry by efficiently scaling their businesses through deeper access to information and insights.

Victim:   |  Group: 
GB flag

Go-Ahead Group 

Company logo
Ransomware Group:

Discovery Date: 2023-09-26 22:10

Sector:
Go-Ahead Group plc is a passenger transport company based in Newcastle upon Tyne, England. The majority of its operations are within the United Kingdom, Ireland, Singapore, Norway, and Germany. Go-Ahead diversified into ground handling services at various British airports via the acquisition of Gatwick Handling International, British Midland, and Reed Aviation. Acquired numerous other British transport companies, including Thames Travel, Carousel Buses, Hedingham, Anglian Bus, and HC Chambers & Son. It was contracted to operate bus and rail services in Germany and Singapore. During January 2023, it was announced that Go-Ahead was expanding into the Australian market via the U-Go Mobility joint venture with the engineering company UFL.

Victim:   |  Group: 
 flag

Ropertech.com & Vertafore.com 

Company logo
Ransomware Group:

Discovery Date: 2023-09-26 17:38

Sector:
Vertafore is a Denver-based insurance technology company. It has developed various software for insurance companies, such as content management and workflow software, insurance knowledge base, data and analytics. It's insurance management software solutions allow participants in the insurance distribution channel to adapt to an evolving insurance industry by efficiently scaling their businesses through deeper access to information and insights.

Victim:   |  Group: 
 flag

Sabre Corporation 

Company logo
Ransomware Group:

Discovery Date: 2023-09-06 13:33

Sector:
Sabre Corporation is the largest global distribution systems provider for air bookings in North America. It's software, data, mobile and distribution solutions are used by hundreds of airlines and thousands of hotel properties to manage critical operations. Sabre is a leading software and technology company that powers the global travel industry. It partners with airlines, hoteliers, agencies and other travel partners to retail, distribute and fulfill travel. Its technology is the intelligence behind mobile apps, airport check-in kiosks, online travel sites, airline and hotel reservation networks, travel agent terminals, and scores of other travel solutions.

Victim:   |  Group: 
 flag

Sysco Corporation 

Company logo
Ransomware Group:

Discovery Date: 2023-05-27 17:52

Sector:
Sysco Corporation is an American multinational corporation involved in marketing and distributing food products, smallwares, kitchen equipment and tabletop items to restaurants, healthcare and educational facilities, hospitality businesses like hotels and inns, and wholesale to other companies that provide foodservice. Sysco is the world's largest broadline food distributor; it has more than 600,000 clients in a wide array of fields. Management consulting is also an integral part of their services. The company operates approximately 330 distribution facilities worldwide; providing service to over 90 countries.

Victim:   |  Group: 
 flag

Gentex Corporation 

Company logo
Ransomware Group:

Discovery Date: 2023-05-27 17:51

Sector:
Gentex Corporation is an American electronics and technology company that develops, designs and manufactures automatic-dimming rear-view mirrors, camera-based driver assistance systems, and other equipment for the global automotive industry. They produce dimmable aircraft windows for the commercial, business and general aviation markets. In addition, the company produces photoelectric smoke detectors, signaling devices, and the HomeLink Wireless Control System for the North American fire protection market. The company's customers are GM, Ford, BMW, Mercedes, Tesla, Airbus, Audi, Toyota, Mazda, Nissan, Honda, Porshe, Bentley and so on.

Victim:   |  Group: 
BR flag

ANDRADE GUTIERREZ & ZAGOPE 

Company logo
Ransomware Group:

Discovery Date: 2023-05-27 17:49

Sector:
ANDRADE GUTIERREZ is a Brazilian private multinational conglomerate headquartered in Belo Horizonte. As of 2013, Andrade Gutierrez is the second largest construction company in Brazil with branches in 44 countries and a net income of 8 billion BRL. In the engineering segment, AG operates in the construction of hydroelectric power plants, thermoelectric power plants, nuclear power plants, petrochemical plants, mining, steel industry, refineries, harbors, subways, sanitation and urbanization, airports, railroads, civil engineering.

Victim:   |  Group: 
 flag

Incredible Technologies 

Company logo
Ransomware Group:

Discovery Date: 2023-04-10 22:28

Sector:
Incredible Technologies is an American developer and manufacturer of coin-operated video games and Class III casino games based in Vernon Hills, Illinois. The company's most common product is the Golden Tee Golf series. IT, Inc. products and gaming software are used in more than 50 counties around the world.

Victim:   |  Group: