Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo Astro Lighting

Group: cactus

Discovered by ransomware.live: 2023-09-26

Estimated attack date: 2023-09-02

Description:

Astro specialises predominantly in wall and ceiling lighting, and has achieved a wide reputation as the leading supplier of bathroom lighting in the UK.



DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuse 123-reg.co.uk
MX Records
  • eu-smtp-inbound-2.mimecast.com.
  • eu-smtp-inbound-1.mimecast.com.
TXT Records
  • d365mktkey=DEJwA5R06FYlyWABHXHjbCXZ9rqif1xW5LujBwGx1Ckx
  • d365mktkey=KjHSkPQwxvRYMn2BqED7CwIPmDDWIK8EmO5zriynQxkx
  • google-site-verification=oa2sUL1N7S_05IsvWgqbI-b97VWTKEWUaHgD7C3EIxE
  • google-site-verification=pgD2dbXBxN9ErmEP5tJaAnMdPygmoLH-qC8ocBSuExY
  • ib19gvavqtsvlannc2udj89ov8
  • imhbc2g1glrv47e23fdb60e6cn
  • v=spf1 a mx include:eu._netblocks.mimecast.com include:customers.clickdimensions.com include:amazonses.com include:_spf.distribution.vueliopm.com ~all
  • zq821957k0cwn0t6dmlf8qllsy54cc6t
  • MS=ms61852248
  • apple-domain-verification=z1NuXUyp9IOR4mKt
  • autodesk-domain-verification=NCxo56vIwsNJ_H1u5-JO
Cloud / SaaS Services Detected
Apple Amazon SES/WorkMail Microsoft 365 Autodesk Mimecast

Leak Screenshot:

Leak Screenshot