Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo Noroaco

Group: Beast

Discovered by ransomware.live: 2025-11-09

Estimated attack date: 2025-11-06

Data exfiltrated: 750GB

Description:

Noroaco - Ferro e Aco specializes in a diverse range of high-quality steel products including tubes, beams, tiles, sheets, and plasma cutting services. With over sixteen years of experience, the company serves clients from various sectors such as agribusiness, construction, metallurgy, and locksmithing. They ensure excellence in every step of production by investing in team training and modern equipment, sourcing steel from the country's leading steel mills. Noroaco caters to both wholesale and retail markets, providing tailored solutions for clients' steel project needs.



DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuse-contact publicdomainregistry.com
  • noroaco.dom gmail.com
MX Records
  • alt1.aspmx.l.google.com.
  • aspmx.l.google.com.
  • aspmx2.googlemail.com.
  • alt2.aspmx.l.google.com.
TXT Records
  • v=spf1 ip4:162.241.62.77 ip4:162.241.50.165 +a +mx +ip4:108.168.182.68 +ip4:198.11.247.79 ~all
  • MS=C5E99E54DAA1842729ABDCC868D5F00E1A03D9A5
Cloud / SaaS Services Detected
No well-known cloud or SaaS service detected.

Leak Screenshot:

Leak Screenshot