Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

G R Infraprojects

grinfra.com

Discovered 2026-08-30 09:54 UTC
Est. attack date 2026-08-28
Country IN
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Description:

grinfra.com zoominfo.com/c/g-r-infraprojects-ltd/353612422 We have taken NDA files, HR data, user data, employee data, technical drawings, models, bank statements, tax and legal documents, confidential files, photographs of work, screenshots, passport scans, VIP client data, and much more the total volume of data exceeds 531 GB. Grinfra G R Infraprojects Ltd is an Indian integrated infrastructure EPC company founded in 1995, headquartered in Udaipur and Gurugram. It builds roads, highways, bridges, metros, railways, tunnels, ropeways and power transmission lines across 23+ Indian states, with a 10,000-strong workforce and an order book of roughly ₹19,000+ crore ($2.3 bn). Projects are delivered under EPC, BOT, HAM and BOOT models, backed by in-house manufacturing (bitumen, paints, metal crash barriers) and ~7,500 equipment units. Listed on BSE/NSE since July 2021 (ticker GRINFRA), rated CRISIL AA / CARE AA+ (stable).

Infostealer activity detected by HudsonRock

Compromised Employees: 30

Compromised Users: 0

Third Party Employee Credentials: 63


External Attack Surface: 10


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • itgrinfra.com
  • abusegooddomainregistry.com
MX Records
  • grinfra-com.mail.protection.outlook.com. Microsoft 365
TXT Records
  • _globalsign-domain-verification=yc0wvI0XJ_0Z2x3zZ4DNoMgy0YQWUi7OxxjMCNFgfp
  • o2a549MGWHyS8RTs42cqhkKzRzoLooBPDZAdtmogQWE=
  • google-site-verification=TwrIZNQ_dPYZ8dcDENKOoWAZOdlQawZg1AoKLIKNaN0
  • MS=ms73178669
  • v=spf1 ip4:20.192.12.145 include:spf.protection.outlook.com -all
  • _globalsign-domain-verification=25ekUIjjW21d50KdgF1TqoYDv8LlIeuyPLdlfJ1eb5
Cloud / SaaS Services Detected
Global Sign Microsoft 365