Agoravita
Agoravita
Group: cactus
Discovered by ransomware.live: 2023-07-20
Estimated attack date: 2023-07-20
Description:
Since 1999, Agoravita has supported companies in their infrastructure projects and IT services, digital communications, software development and training, which form the basis of their digital transition.
DNS Records:
The following DNS records were found for the victim's domain.
WHOIS Emails
- abuse ovh.net
MX Records
- agoravita-eu.mail.protection.outlook.com.
TXT Records
- google-site-verification=5tsOVEgLcgeBhJQZ6CqbNaQVJV4DFyjNSkujfUdeJ2g
- v=spf1 a include:spf.mailjet.com a:phisthreat.agoravita.com include:spf.mandrillapp.com ip4:46.105.79.52 ip4:185.139.21.63 ip4:185.139.21.252 ip4:185.146.222.50 ip4:192.168.10.149 include:spf.protection.outlook.com ip4:185.139.20.179 ip4:77.159.204.130 " "ip4:45.80.33.216 ip4:89.91.93.176/29 ip4:192.168.10.105 ip4:185.146.222.50 ip4:185.139.20.102 ip4:185.139.20.218 ip4:185.139.21.226 a:smtp-relay.agoravita.com include:_spf_eucentral1.prod.hydra.sophos.com -all
- f9c232ade0b8971ea43969a078129942
- MS=ms88991637
- sophos-domain-verification=cb9e0eac35acef72c53043b8ce6a8d53a6c75c58f128c36e3a0aeecb03ddb4b3
Cloud / SaaS Services Detected
Microsoft 365
Mandrill
Mailjet
Sophos
Leak Screenshot:
