Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

SPGus#####

spgusa.com

Group Clop
Discovered 2024-12-24 23:05 UTC
Est. attack date 2024-12-24
Country US
Duplicate Entry
This victim has been identified as a duplicate of another entry in our database. However, this may not always be the case: the same organization can be targeted multiple times by the same or different ransomware groups, which may result in separate legitimate entries. Search for related entries

Description:

Presumed victim name: SPG USA - Cl0p announcement. We have data of many companies who use cleo. Our teams are reaching and calling your company and provide your special secret chat.

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • d9439e12cd865b8d96fe65c03d0f3a783defbffa7817fffe90e14bb9f6d35200spgusa.com.whoisproxy.org
  • d9439e12cd865b8d96fe65c03d0f3a78ac25a7d2cbc5577ae9093cc070357729spgusa.com.whoisproxy.org
  • d9439e12cd865b8d96fe65c03d0f3a781bd9ce5f13b47bbb444fe2853f6524c1spgusa.com.whoisproxy.org
  • d9439e12cd865b8d96fe65c03d0f3a780832a851fe7e65d1b5e6a6924aca5fdespgusa.com.whoisproxy.org
  • trustandsafetysupport.aws.com
MX Records
  • spgusa-com.mail.protection.outlook.com. Microsoft 365
TXT Records
  • v=spf1 include:spf.protection.outlook.com include:west.spf.spgusa.com include:aws.spf.spgusa.com include:emailus.freshservice.com include:spf.emailsignatures365.com include:spf.exclaimer.net ~all
  • MS=ms31566424
  • google-site-verification=HyybhpBLZdfskagjcM4cUNGwYHTsF_FjDEc3Dj-6TsY
  • google-site-verification=IC8xWgC0ES2o_3rartH6HiOzB-bwIrvkEFGSGawg_JU
  • google-site-verification=_xnl-yhgkjuBphjAatbxuP7svvuy1ex0FPIOnccvQU4
  • lovable_verification=08bSQ6lKtk69WUXDjHCa
  • sending_domain1099213=27ed299c4932382198b533ec9e3826c4e71eb4f40edadc9c1d27c3595ad2609c
Cloud / SaaS Services Detected
Microsoft 365

Leak Screenshot:

Leak Screenshot