Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

SBI Audiovisual Medinbox

sbiav.com

Discovered 2026-10-16 09:38 UTC
Est. attack date 2026-10-14
Country ES
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Description:

sbiav.com SBI Audiovisuel is a Quebec AV company founded in 1991 (HQ in Saint-Bruno-de-Montarville, ~11 staff), doing corporate event production — sound, lighting, video, webcasting — plus its signature niche: live streaming of surgical operations for medical training. It deploys its own CASTER mobile system and claims exclusive North American rights to France's Medinbox tech, which is used at hospitals like Mount Sinai NY; note SBI is an integrator, not the tech's manufacturer. Public activity runs from 2018 through 2026 (US tours, medical congresses, hiring), with no lawsuits or scam signs found. Revenue is not disclosed — third-party estimates vary ($1–5M range), all unverified. Weak spots: no independent client reviews, no published certificates, and the site blurs its own brand with Medinbox's. For Quebec/Canada corporate events or live-surgery broadcasts it's a credible pick; for critical projects, verify team size, redundancy plans, and patient-data handling in writing.

Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 2

Third Party Employee Credentials: 0


External Attack Surface: 1


Exposure Report
by ParanoidLab
25
Passwords
4 critical
0
Cookies
0 critical
Last queried 2026-10-16 09:38 UTC

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • supportmelbourneit.au
  • abusemelbourneit.com.au
MX Records
  • mx-cluster-ca03.hornetsecurity.com.
  • mx-cluster-ca01.hornetsecurity.com.
  • mx-cluster-ca-fallback.hornetsecurity.com.
  • mx-cluster-ca02.hornetsecurity.com.
TXT Records
  • v=spf1 +a +mx +ip4:173.209.59.210 +ip4:192.175.109.197 include:spf.hornetsecurity.com +include:spf.protection.outlook.com +ip4:158.69.55.37 -all
Cloud / SaaS Services Detected
Hornetsecurity