Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Logo

MORSEMOVING

morsemoving.com
Group Blackbasta
Discovered 2023-06-20 13:58 UTC
Est. attack date 2023-06-20
Country US
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Description:

Herb and Vi Morse founded Morse Moving in 1954. From their 11 children and 42 grandchildren, twenty-six work full-time in the business today, ensuring you the finest relocation possible in the industry. Morse Moving has eight brothers and three sisters who began working in the business while very young; gaining valuable experience in packing, loading and driving moving vans. Today 3 work as van operators, two of which were named in the Allied’s top ELITE-FLEET, training our upcoming drivers. This ensures our service providers receive the highest level of training! Morse Moving has developed a team of drivers with an average of 14 years experience in moving families and corporations. This allows us to relocate you or your employees across town or around the world. We have “Certified Moving Consultants” and “Certified Relocation Professionals”, with years of experience. They have received several national awards for being the BEST in the relocation industry. They are Allied Quality Award winners and are proud to be the winner of the Allied 2016 Quality Hauling Agent Award.SITE: www.morsemoving.com Address 10049 Harrison Rd Ste 500 Romulus, Michigan, 48174 United States
Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 1

Third Party Employee Credentials: 0

External Attack Surface: 1

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain.operationsweb.com
MX Records
  • morsemoving-com.mx1.arsmtp.com.
  • morsemoving-com.mx2.arsmtp.com.
TXT Records
  • MS=ms95041320
  • v=spf1 include:edgepilot.com include:morsemoving-COM.spf.smtp25.com include:authsmtp.com include:_spf.xymmetrix.net ip4:204.14.8.32 -all
Cloud / SaaS Services Detected
Microsoft 365

Leak Screenshot:

Leak Screenshot

Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data. This platform indexes only publicly visible information posted by ransomware operators and open web sources without accessing or obtaining the underlying stolen content. The service is provided to support public awareness, legitimate research, and cyber-resilience. No stolen personal or confidential data is collected or distributed via this site.