Buy Me a Coffee

Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo GTT

Group: blackbasta

Discovered by ransomware.live: 2023-04-27

Estimated attack date: 2023-04-27

Country: CA

Description:

Freight & Logistics Services · Canada · 256 EmployeesWebsite www.gtgroupinc.comRevenue $34.4MGT Group is the marine container specialist providing sales, repair, modifications, transportation, storage, rental and warehousing services.


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • compliance domain-inc.net
MX Records
  • spamdude.redwarning.com.
TXT Records
  • MS=ms60726446
  • v=spf1 ip6:2603:10b6:b01:d::14 ip4:199.204.50.2 ip4:18.209.149.57 ip4:208.72.179.41 ip4:208.72.177.106 ip4:199.204.50.10 a:gtmail.gtgroupinc.com a:ex01.gtgroupinc.com include:spf.protection.outlook.com include:spf-ca.emailsignatures365.com -all
  • MS=64A15581D14E006BF19C9E2954EACEE78AC1A756
  • slcprnf3s6sutpm83rrs4r5muc
Cloud / SaaS Services Detected
Microsoft 365

Leak Screenshot:

Leak Screenshot