Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Logo

Ecuadors National Police

policia.gob.ec
Group Thegentlemen
Discovered 2026-10-16 09:28 UTC
Est. attack date 2026-10-14
Country EC
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation
Duplicate Entry
This victim has been identified as a duplicate of another entry in our database. However, this may not always be the case: the same organization can be targeted multiple times by the same or different ransomware groups, which may result in separate legitimate entries. Search for related entries

Description:

policia.gob.ec Ecuador's National Police country's main law enforcement agency — 180 years old (institutionalized 1846, professionalized 1938), under the Ministry of Interior, commanded by GraS. Pablo Vinicio Dávila Maldonado (since July 2025). Scale: 58,000+ officers, 14 police schools, 317 per 100K population. 2025 was its most active year ever: 712,642 operations, 71,399 arrests, 227 tons of drugs seized, $9.6B in damage to criminal organizations, 21 high-value targets neutralized — but also Ecuador's deadliest year (8,847 homicides). 2026 shows improvement: −27.7% homicides, −43–56% robberies; new Dinae anti-kidnapping unit achieves 90%+ effectiveness. Budget: ~$1–1.2B/yr from state funds.
Infostealer activity detected by HudsonRock

Compromised Employees: 399

Compromised Users: 11087

Third Party Employee Credentials: 45

External Attack Surface: 124

Infostealer Distribution
Exposure Report
by ParanoidLab
88586
Passwords
1851 critical
273
Cookies
7 critical
Last queried 2026-10-13 17:10 UTC
FortiBleed Exposure Detected

This domain's FortiOS SSL-VPN credentials were exposed via the "FortiBleed" leak (CVE-2022-40684).

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abusenic.ec
  • dntic.direccionpolicia.gob.ec
MX Records
  • mail.policia.gob.ec.
TXT Records
  • google-site-verification=QpUSfCTXI4lMWaXgrzvaKZ-4dgKYMcj4L8nvcWJgrUE
  • google-site-verification=yqcI9bqdtykWeYsqrKowqNrC4E-PF9R5Qpr6tTJ1d_k
  • oq6j3u367ttg93gh4rqrcjfce0
  • v=spf1 mx a:pmg.policia.gob.ec a:mail.policia.gob.ec include:amazonses.com -all
  • MS=CE0540823FA164F65A36B86460098ACAA2E3A6B9
  • google-site-verification=Juetp1zSd-1iEkZ_O8SpkLHsGwij1Ld8M0durSZf2mU
Cloud / SaaS Services Detected
Amazon SES/WorkMail

Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data. This platform indexes only publicly visible information posted by ransomware operators and open web sources without accessing or obtaining the underlying stolen content. The service is provided to support public awareness, legitimate research, and cyber-resilience. No stolen personal or confidential data is collected or distributed via this site.