Contact us Buy Me a Coffee

Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Logo

Desysweb

desysweb.pe
Group Nova
Discovered 2026-05-08 07:57 UTC
Est. attack date 2026-05-07
Country PE

Description:

Desysweb is a comprehensive technology solutions integrator specializing in telecommunications and IT services, including managed services and a Security Operation Center. With over 200 clients and more than 13 years of experience, they offer personalized consulting, high-quality materials, and competitive pricing. The company is ISO 27001:2022 certified, ensuring robust information security and data protection. Desysweb operates nationally with a presence in eight provinces and is committed to delivering tailored projects and 24/7 customer support through a team of certified engineers. - Los sistemas de la empresa están encriptados con más de 60 mil archivos en múltiples servidores. Tienes tiempo de contactarte con nuestro departamento a través de los canales indicados en el archivo de recuperación que está dentro de los sistemas encriptados. Una vez que termine la cuenta regresiva, ya no será posible recuperar la información y tus datos se perderán. Estamos listos para desencriptar cada uno de los archivos. Contáctanos cuanto antes.
Infostealer activity detected by HudsonRock

Compromised Employees: 25

Compromised Users: 0

Third Party Employee Credentials: 16

External Attack Surface: 6

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • relay.zoffice.cloud.
TXT Records
  • google-site-verification=3hKR8pQALW3sUeowmfUYFmpn4u2z_0sKCqDWDeRC2tg
  • v=spf1 a mx include:zoffice.sabuesospam.com -all
Cloud / SaaS Services Detected
No well-known cloud or SaaS service detected.

Leak Screenshot:

Leak Screenshot

Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data. This platform indexes only publicly visible information posted by ransomware operators and open web sources without accessing or obtaining the underlying stolen content. The service is provided to support public awareness, legitimate research, and cyber-resilience. No stolen personal or confidential data is collected or distributed via this site.