Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Group Storm New Group
Discovered 2026-08-18 04:19 UTC
Est. attack date 2026-08-17
Country AU
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation
This is an emerging group, so this claim should be treated with caution until independently verified.

Description:

Ramsey Bros is a family-owned and operated business that serves as an authorized Case IH dealer, providing quality machinery, parts, and services. They offer a wide range of new and used machinery, along with scheduled servicing programs and operator training. Their intended clients include farmers and agricultural businesses looking for reliable equipment and support. With multiple dealership locations, they aim to be a powerful partner in harvesting and agricultural operations. The company headquarters is located in 23 Henderson Avenue, Cleve, SA 5640, Australia.. 51-200 Employees

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • mx-01-us-west-2.prod.hydra.sophos.com.
  • mx-02-us-west-2.prod.hydra.sophos.com.
TXT Records
  • HLSLwWRx/r8sjIrtaI9KAXoDfyRovwu+e5J+A9UQDMb7k3BE3L32VzXRwXIiZevVYsvuZo7geaZJENEiC+B1iA==
  • f1e2b998f037101fef0178a8d7536145097c1fcb7c4ce0411912554a2118c66e
  • sophos-domain-verification=f74f671b238b685e70483cb2b6bf53227db5691b1fed6a2884daa20f9b3fa2f3
  • sending_domain1087692=c19a155ae19d907c1cf86f85dc3dc76757e4b3eb1873820dcb1ddd8a1aa22831
  • pardot1087692=9538374b72c1fe84bbf771e0ee7ee8a37a80ff57aac4c39a09f226d96722e407
  • v=spf1 include:aspmx.pardot.com ~all
  • v=spf1 ip4:138.217.135.90 ip4:20.70.90.56 ip4:110.145.149.114 ip4:165.228.5.92 ip4:139.130.129.166 ip4:210.23.145.198 ip4:101.187.246.199 ip4:210.23.145.194 ip4:65.181.3.219 ip4:138.217.51.54 include:spf.protection.outlook.com include:spf-au.emailsignatur" "es365.com include:_spf_uswest2.prod.hydra.sophos.com -all
  • MS=ms18345221
Cloud / SaaS Services Detected
Microsoft 365 Salesforce Sophos

Leak Screenshot:

Leak Screenshot