Buy Me a Coffee

Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Logo Complexul Energetic Oltenia

Group: Thegentlemen

Discovered by ransomware.live: 2026-01-06

Estimated attack date: 2026-01-06

Country: RO

Description:

www.ceoltenia.ro https://www.ceoltenia.ro/en/despre/profil/date-financiare/ https://www.zoominfo.com/c/complexul-energetic-oltenia-sa/372669392 Complexul Energetic Oltenia is a Romanian energy company established on May 31, 2012, following the government's decision to reorganize the energy sector through the merger of several energy-producing companies. The company focuses on sustainable energy production and aims to ensure safety and professionalism in its operations. Its services include energy supply and commercialization, as well as investments in energy efficiency and development. The intended clients are diverse, including both residential and commercial sectors seeking reliable energy solutions.

🕵️ Infostealer activity detected by HudsonRock

Compromised Employees: 18

Compromised Users: 34

Third Party Employee Credentials: 5

External Attack Surface: 9

Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • pmg.ceoltenia.ro.
  • pmgDM.ceoltenia.ro.
TXT Records
  • v=spf1 ip4:86.122.194.100 ip4:82.77.74.65 ip4:82.77.74.66 -all
  • Societatea Complexul Energetic Oltenia S.A.
  • MS=BA303E6565D2C1AB120FB90B676FB9626FF40F07
Cloud / SaaS Services Detected
No well-known cloud or SaaS service detected.

Leak Screenshot:

Leak Screenshot

Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data. This platform indexes only publicly visible information posted by ransomware operators and open web sources without accessing or obtaining the underlying stolen content. The service is provided to support public awareness, legitimate research, and cyber-resilience. No stolen personal or confidential data is collected or distributed via this site.