Buy Me a Coffee

This space is available for sponsoring Ransomware.live Contact us to sponsor this space

Logo Seoul Guarantee Insurance

Group: Gunra

Discovered by ransomware.live: 2025-08-18

Estimated attack date: 2025-08-18

Country: KR

Data exfiltrated: 13.2TB

Description:

[AI generated] Seoul Guarantee Insurance (SGI) is a South Korean company specializing in credit and guarantee insurance for businesses. It offers insurance cover for trade, construction, and small to medium-sized businesses. It also provides surety bonds, credit guarantees, and financial services. Other services include reinsurance, loan guarantees, export insurance, and retail insurance products. The company was established in 1969 and is based in Seoul, South Korea.


🕵️ Infostealer activity detected by HudsonRock

Compromised Employees: 1

Compromised Users: 845

Third Party Employee Credentials: 1


External Attack Surface: 66


Infostealer Distribution


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • mailmx.sgic.co.kr.
TXT Records
  • MS=FDC0F09A92EA6B5AEF8D853A9C212515E5F2E405
  • v=spf1 ip4:203.229.175.100 ip4:203.229.175.101 ip4:203.229.175.102 ip4:121.128.224.13 ip4:121.128.224.23 ip4:121.128.224.99 ip4:203.229.175.114 ip4:203.229.175.118 ip4:121.128.224.102 ip4:121.128.224.101 ip4:203.229.175.65" " ip4:203.229.175.66 ip4:203.229.175.67 ip4:121.128.224.100 ip4:203.229.175.115 ip4:203.229.175.116 ip4:118.216.173.131 ip4:121.128.224.99 -all
Cloud / SaaS Services Detected
No well-known cloud or SaaS service detected.

Leak Screenshot:

Leak Screenshot