Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks


Group: Blacknevas

Discovered by ransomware.live: 2025-08-06

Estimated attack date: 2025-05-24

Country: GB

Description:

Payme Ltd is a CIS payroll and contracting company with FCSA and professional passport accreditation for agencies and contractors.loading the entire company infrastructure, 1030 gigabytes of passport data and financial reports

Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 67

Third Party Employee Credentials: 0


External Attack Surface: 7


Infostealer Distribution


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • payme-co-uk.mail.protection.outlook.com.
TXT Records
  • as=1203519136
  • lZ/hVBxNotgPc0b/d5/rVE/AI7JIDebSSzS/KQ3qD0c1aiHPILDEDimbcED2dx1ZQqGGoH+1g2O2cl0YRPOyEw==
  • v=spf1 mx a include:spf.protection.outlook.com include:authsmtp.com include:cmail1.com include:i4services.uk -all
  • MS=ms37273364
Cloud / SaaS Services Detected
Microsoft 365

Leak Screenshot:

Leak Screenshot