Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

FTAPI Software

ftapi.com

Discovered 2026-09-26 08:42 UTC
Est. attack date 2026-09-25
Country US
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Description:

ftapi.com zoominfo.com/c/ftapi-software/346927067 FTAPI (founded 2010, Munich, Germany) is a software company offering a secure, GDPR-compliant platform for exchanging sensitive business data and automating workflows — encrypted email and file transfer, virtual data rooms, digital forms and no-code process automation. It serves 2,000+ organizations and over a million users, mainly in public administration, healthcare, insurance and industry, with all data hosted exclusively in Germany under strict certifications (ISO 27001, BSI C5, SOC 2) and optional zero-knowledge encryption. Its core selling point is European digital sovereignty — a compliant alternative to US cloud tools like Dropbox under GDPR, NIS-2 and DORA regulations. In 2025 it raised €65 million from PE investors Armira and Tikehau Capital, which took control to fund EU expansion and acquisitions. The company employs around 150 people and targets becoming a leading European player in secure data exchange by 2028–29.

Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 426

Third Party Employee Credentials: 0


External Attack Surface: 100


Infostealer Distribution

Exposure Report
by ParanoidLab
1524
Passwords
5 critical
139
Cookies
3 critical
Last queried 2026-09-26 08:42 UTC

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain-abuseinternetx.com
MX Records
  • aspmx3.googlemail.com. Google Workspace
  • aspmx4.googlemail.com. Google Workspace
  • aspmx5.googlemail.com. Google Workspace
  • alt1.aspmx.l.google.com. Google Workspace
  • aspmx2.googlemail.com. Google Workspace
  • alt2.aspmx.l.google.com. Google Workspace
  • aspmx.l.google.com. Google Workspace
TXT Records
  • pardot855063=ccbdaf5a446a1b41939ff22343ae0908f48b296f1ee4cd6d9cec0c072128e126
  • pardot855063=4cc9d97fac2074d401d9065806953bc6cc892f51b38b510b7eeeef560404db6c
  • swisssign-check=HPm9_5BRLPcHi5glvv1rYBvB0po
  • v=spf1 include:_spf.jpberlin.de include:_spf.google.com include:_spf.salesforce.com include:et._spf.pardot.com include:_spf.general.transactional-mail-a.com ~all
  • swisssign-check=TOkTWcPPnGJ7KJ-3Oxm2z7M3iso
  • openai-domain-verification=dv-ljgY5mJj845GMYbnxonqJ1Dn
  • asv=e6d8b04376aebd2cfd3fc8479f3a74b9
  • miro-verification=879790187bea40a30193995cd50ec003c3a7da73
  • HARICA-5tZNh0iPrOm2AwrB2Ba
  • _1fpzj3r1ahfb7ld2xmjjh9o2nmovusa
  • apple-domain-verification=xW1e8XH4GPdL7XGw
  • swisssign-check=DLRvakwV333bUWlYiblFITIhq2s
  • google-site-verification=4B-avy3KhIaBe0S7T0I7kCMQ_OHJ89MzbLN6aZ9hXBE
  • MS=ms64873902
Cloud / SaaS Services Detected
Apple Microsoft 365 Miro OpenIA Salesforce Stripe