Group:
Incransom
Discovered by ransomware.live: 2025-01-21
Estimated attack date:
2025-01-21
Country:
Description:
RETAL has been offering our customers complete packaging solutions for over 20 years. With 19 production sites in 10 countries, our sales area encompasses more than 70 countries throughout Europe, Asia, Africa and the Americas. Parent company RETAL Industries Ltd, whose President and Member of the Board of Directors is Anatoly Martynov is headquartered in Limassol, Cyprus. Through our combined expertise and dedication to responsible development and manufacturing, we deliver reliable value to customers in food and beverage sectors globally. To provide our customers with industry leading packaging products, services and solutions. Through our combined expertise and dedication to excellence in development and manufacturing, we deliver value to customers in food and non-food sectors globally. Plastec S.R.L. (Italy), a PET container manufacturer, is acquired
DNS Records:
The following DNS records were found for the victim's domain.
- retalgroup.com@shieldwhois.com
- abuse@namesrs.com
- mx2.hc893-98.c3s2.iphmx.com.
- retalgroup-com.mail.protection.outlook.com.
- mx1.hc893-98.c3s2.iphmx.com.
- ca3-0a34fc5028124732bfbf2fa9a7ccd590
- v=spf1 mx ip4:109.169.35.82 ip4:109.169.35.80 ip4:198.187.29.216 ip4:198.187.29.179 include:spf.protection.outlook.com include:relay.kinstamailservice.com -all
- MS=ms84711269
- apple-domain-verification=i6k4qtJZvWkOwUh8
- atlassian-domain-verification=81FaOfJSx5BNAiX/AbvvHnLlAnPbqjSHJmbuhfGtWvbgD6yNZkRC4aeJzKJze2L3
- atlassian-sending-domain-verification=743d412c-fd20-47a7-be41-b60d25d4ff13
Cloud / SaaS Services Detected
Apple
Atlassian
Microsoft 365
Leak Screenshot:
Legal Disclaimer:
Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
This platform indexes only publicly visible information posted by ransomware operators and
open web sources without accessing or obtaining the underlying stolen content.
The service is provided to support public awareness, legitimate research, and cyber-resilience.
No stolen personal or confidential data is collected or distributed via this site.