Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Groupe Alternance

groupe-alternance.com

Discovered 2026-11-12 09:53 UTC
Est. attack date 2026-11-11
Country FR
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Description:

groupe-alternance.com Groupe Alternance is a French private education group founded in 2008 in Paris, offering work-study (alternance) programs across 5 schools with 10,000 plus students, 300 plus staff and 1,200 plus partner companies. Its model lets students earn a salary while their employer pays for their education, covering Bachelor, BTS and MBA programs in management, marketing, finance, HR, logistics, tourism and sport management. Key schools include ESAM, EFB, ECE, IPAC and the Institut de Management International, with campuses in Paris, Lyon, Marseille, Toulouse, Lille, Bordeaux and Strasbourg. Programs run through apprenticeship and professionalization contracts with companies covering tuition costs. Graduates receive state-recognized diplomas from Bac+2 to Bac+5. Its motto is that training should cost nothing and earn everything, positioning it as a new generation of business schools.

Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 123

Third Party Employee Credentials: 1


External Attack Surface: 4


Exposure Report
by ParanoidLab
494
Passwords
1 critical
155
Cookies
0 critical
Last queried 2026-11-12 09:53 UTC

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuseovh.net
MX Records
  • vade-mx-eu-fallback01.hornetsecurity.com.
  • vade-mx-eu-fallback02.hornetsecurity.com.
  • vade-mx-fr01.hornetsecurity.com.
  • vade-mx-fr02.hornetsecurity.com.
TXT Records
  • 1|www.groupe-alternance.com
  • google-site-verification=4EUwT691TKpYvTU3kdSOlBJOzYf0sIoBAF4MLnce0Xs
  • google-site-verification=jwZ8_FF-JRQ3hV-ilsNi7z5fnwBWt936hGav3L4hd5E
  • brevo-code:8d06cb2913558f00241f9e6bae87acc7
  • MS=ms83764613
  • v=spf1 ip4:178.33.46.74 include:spf.mailjet.com include:mx.ovh.com include:spf.protection.outlook.com include:spf.hornetsecurity.com ~all
Cloud / SaaS Services Detected
Brevo Hornetsecurity Mailjet Microsoft 365

Leak Screenshot:

Leak Screenshot

Other recent victims