Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo Big Ass Fans

Group: royal

Discovered by ransomware.live: 2023-04-10

Estimated attack date: 2023-04-10

Description:

Big Ass Fans is a fans, light and controls manufacturer for different business directions. These guys have nothing against holding their employees personal information almost open-sourced. They've lost 246 gygabytes of data interested for its details. Tons of accounting and finance information, projects, contracts, payment docs, employees' salaries, passports, medical insurance policies, phones, emails - everything you want.



DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuse godaddy.com
MX Records
  • alt2.aspmx.l.google.com.
  • alt3.aspmx.l.google.com.
  • alt4.aspmx.l.google.com.
  • alt1.aspmx.l.google.com.
  • aspmx.l.google.com.
TXT Records
  • klaviyo-site-verification=XUQwGe
  • SFMC-WM37Z7JOTuG_0tsCEfjk12fHN9Xwof3ZVp10XNN3
  • google-site-verification=-Cc71jHQ7Z0-60dqgRfb7rIPD2pML2ykAbVuC2-qum0
  • google-site-verification=vkKKpfP3_VcPeJAwF6385YckfS-0EHTSUNs-2vU2g0Q
  • hj-ownership=XYNbg26kb%H#D
  • pardot_11152_*=df50d90c2706b7d1c3cf588321f093d856e2279e02e6ba0e6a3f16ef7d0221f7
  • v=spf1 ip4:23.21.109.197 ip4:23.21.109.212 ip4:147.160.167.0/26 ip4:50.31.35.56 include:_spf.google.com include:_spf.salesforce.com include:mailgun.org ~all
  • zapier-domain-verification-challenge=13363976-bc56-494a-8533-6c971a5dc26a
  • google-site-verification=o2LNaXFytpn8900R0okP9FfTp2H3F5g-hcrV5j7_EYw
  • dwgtm4rfs5rrjsnbgq3562k8dqbnyd7k
  • 1hcms2qurjgq8j0b5t0puseapl
  • atlassian-domain-verification=tzhhegVpszRH3oETz6XusRCflhcWL9L13vJELCj90WmQKzf13Iob3tIQbqxvlvwP
  • yFg72Nh/vR4RpLPsKkloY4zIVUZF7PDbuPQjGbj6Y67NLPPKJv3ODlBcH+Q0Qc/vFYseb3JpZeBvynrKZVZWHA==
  • google-site-verification=rxOLT7u_STi7ZIXIFy0dEVHVAdkNIRF-25c7LmdJX3c
  • _globalsign-domain-verification=G38FSO6JU3WTtDbUAKe5gKfqSzvCJ9_JHLtpsJITnr
  • apple-domain-verification=5HFPZy9BYqoiGt7U
  • vmJGbFj3
  • google-site-verification=rehEodhgRHVaOn2rCEbH1-sJ6uwYHo-8Ga0Z4iD-dLI
Cloud / SaaS Services Detected
Apple Atlassian Salesforce Mailgun

Leak Screenshot:

Leak Screenshot