Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Logo

Servicios Aereos Estrella

sae.com.mx
Group Thegentlemen
Discovered 2026-08-30 09:49 UTC
Est. attack date 2026-08-28
Country MX
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Description:

sae.com.mx zoominfo.com/c/servicios-aéreos-estrella-s-a/457170292 Servicios Aéreos Estrella, S.A. de C.V. (SAE) is a Mexican business-aviation company and pioneer of executive aviation in Mexico with 30+ years of experience, based at Toluca International Airport — the main private-aviation gateway to Mexico City. It claims to be Latin America's largest FBO, with 12,000 m² of apron, 10,000 m² of hangar storage, four VIP lounges, a café/bar, VIP ground transport and an office next to immigration. Services include private jet charter and rental (from piston aircraft to long-range jets, plus discounted "Empty Legs"), aircraft management and administration, full handling/dispatch (permits, catering, documents, flight closures), aircraft storage and pet-friendly flights, operating 24/7 year-round.
Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 0

Third Party Employee Credentials: 6

External Attack Surface: 0

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • smtp.google.com. Google Workspace
TXT Records
  • MS=ms99943671
  • facebook-domain-verification=eqlvdoqm24xpzrtymdf01wgq68c4e2
  • google-gws-recovery-domain-verification=56837736
  • google-site-verification=R1HJ6tNrbWWfmZdQK_WR5jdpr7wKJJURf-60aXUfSg0
  • google-site-verification=lPkUA2BYx5_o6zPCrQREbZ8jT3vMyk-IySOxa_veRY4
  • v=spf1 include:_spf.google.com ~all
  • v=spf1 include:spf.protection.outlook.com include:23580045.spf10.hubspotemail.net -all
Cloud / SaaS Services Detected
HubSpot Microsoft 365

Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data. This platform indexes only publicly visible information posted by ransomware operators and open web sources without accessing or obtaining the underlying stolen content. The service is provided to support public awareness, legitimate research, and cyber-resilience. No stolen personal or confidential data is collected or distributed via this site.