NCC_2
NCC_2
Group: Blackbasta
Discovered by ransomware.live: 2023-10-16
Estimated attack date: 2023-09-28
Country:
Description:
Ampersand is a data-driven TV advertising sales and technology company. We reach 116 million multiscreen households, providing viewership insights and planning on 42 million households, in 200+ DMAs, across more than 165+ networks and in all dayparts. Meet Ampersand. The vision for NCC Media was born by a couple, Linda and Bob Williams, in Boston in 1981. Originally called New England Cable Rep, these two entrepreneurs ambitiously set out to unify cable inventory so that an advertiser could have a simpler way to buy cable programming in the local TV market.SITE: www.ampersand.tv Address 151 W 42nd St Fl 11 New York City, New York 10036, United States
DNS Records:
The following DNS records were found for the victim's domain.
- abuse web.com
- ampersand-tv.mail.protection.outlook.com.
- slack-domain-verification=39mPuqOrviBaCT6x39XpXgZ9Re7KuN7CMs5YwT0B
- MS=E646656C694EEAB7043318DC4FEA57E01C4962C5
- apple-domain-verification=DwoxwhakKOo8Iqiz
- wrike-verification=NTU3MzE1NjowNDIyNDRiODdhNjY2N2U0OGM3MzU5ZDQzOTJlMTJlMzExYmZmMTAzMTBkMj
- 889160e8bab05413374ee8f595346d0c
- v=spf1 mx a ip4:63.97.151.0/24 ip4:8.9.70.0/24 ip4:216.143.178.0/24 ip4:50.227.87.0/24 include:spf.protection.outlook.com include:mail.zendesk.com include:sendgrid.net include:okta-mail.ampersand.tv include:okta-prod.ampersand.tv include:okta-ext.ampersan" "d.tv include:_spf.salesforce.com include:dayforcehcm.com -all
- dkejg3v2st3diqs8fv4csq7lv8
- GwhdsCWN6XDNqo80FO7S/lOirF6v0QiMdpJ5hDJ+gySAqEPYwSENBGqSflaqFM5LPbK35XmLOKTBy9GzdnLZWw==
- 00d0b000000x706eaa
- pardot1020482=070da1acd1764c67bf6f90aad34c723222fad5c3364d72787041b35cc7183948
- sending_domain1020482=0f401f9ad2232a26ec73859074ae02cd3cbd38f2138bae15c6675e62344cb334
- docusign=774c929c-18e0-4899-8bbd-06b62b79d4e3
- 93gNx20CDG2UyIkVcgw+J7sZr43oPVzqlqvIUgDGatd9eQ0luUxaCU2DHiMX20q0rch73k2pquzsWZD+7NL+oQ==
- ZOOM_verify_7PynmAsbRauCOvD6HHlmUQ
- MS=ms80893910
Leak Screenshot:
Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data. This platform indexes only publicly visible information posted by ransomware operators and open web sources without accessing or obtaining the underlying stolen content. The service is provided to support public awareness, legitimate research, and cyber-resilience. No stolen personal or confidential data is collected or distributed via this site.