Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Intuitive Machines

intuitivemachines.com

Discovered 2026-05-10 08:57 UTC
Est. attack date 2026-05-05
Country US
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation
Data exfiltrated 70GB
Ransom 100k - one hand

Description:

Intuitive Machines, Inc. designs, manufactures, and operates space products and services in the United States. Its space systems and space infrastructure enable scientific and human exploration and utilization of lunar resources to support sustainable human presence on the moon. The company offers lunar access services, such µNova, lunar surface rover services, fixed lunar surface services, lunar orbit delivery services, rideshare delivery services to lunar orbit, as well as content sales and marketing sponsorships; and orbital services, including satellite delivery and rideshare, satellite servicing and refueling, space station servicing, satellite repositioning, and orbital debris removal. It also provides lunar data services, comprising Lunar data network, lunar south pole and far-side coverage, lunar positioning services, data relay, and data storage/caching. 70GB important information + 9 separate categories. 1. CONFIDENTIAL DATA (17GB); Price: $20 000 one hand / $10 000 many hands. 2. BUYBACK (30MB); Price : $500 one hand / $250 many hands. 3. CALCULATION COST OF PRODUCTION (786MB) - $15 000 one hand / $7500 many hands. 4. DIVIDENDS - $300 one hand / $150 many hands. 5. FINANCE (16GB) - $20 000 one hand / $10 000 many hands. 6. GUIDANCE (18.5GB) - $10 000 one hand / $5 000 many hands. 7. POSSIBLE VIOLATIONS $1 000 one hand / $500 many hands. 8. QUARTERLY REPORTS - $500 one hand / $250 many hands. 9. RESEARCH REPORTS - $7 500 one hand / $3 750 many hands.

Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 0

Third Party Employee Credentials: 3


External Attack Surface: 0


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domainabusetucows.com
MX Records
  • intuitivemachines.mail.protection.office365.us.
TXT Records
  • smartsheet-site-validation=5J99DKiLxoYOsrbvbc6VYMbSBHoq5AyN
  • MS=ms49685803
  • duo_sso_verification=0VfipilbdMKXNP47F5Ku50GAcHKFOigC0vCRajL3AR16Lt4HDB4GnzTpFjKqZ97K
  • 49103b282176e0d3f51b7f77109a12d34a5e966daa7307be43
  • MS=3B1AFC903646BD6F92C003BD9A8E856F3AEFD7E3
  • cisco-ci-domain-verification=60548f334ec649cfd67b3f2d5fe5e57a588170ea565bc35bdfbd1f57f872ce7d
  • notion-domain-verification=pbsmTicvw7ADqeEGnJiQvJXARjt7DbBlg2SkWuwWgiu
  • v=spf1 mx ip4:66.60.240.170 include:spf.protection.office365.us -all
  • MS=5627989701B9D0DB5A707826641D045069B56407
  • jamf-site-verification=ulIIpuH3rGW2BJ83cF8EYQ
  • adobe-idp-site-verification=6b619e4a817d78297b0a34288907d5c45dbc9ca1bbf8895625b851a10b39e506
  • MS=ms64797805
  • google-site-verification=rwmF70mFi3foSgOYAq1o5CtphQ-SklBouqu5JLSXfRo
  • box-domain-verification=d41668677319b22ac01f14a33765c961654a2cef49470a85ddd023e87d54b2fd
  • MS=ms40982540
Cloud / SaaS Services Detected
Adobe Box Cisco Cisco Duo JamF Microsoft 365 Notion Smartsheet

Leak Screenshot:

Leak Screenshot