Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo Rhea Vendors Group SpA

Group: payoutsking

Discovered by ransomware.live: 2025-07-07

Estimated attack date: 2025-04-24

Country: IT

Data exfiltrated: 1.7TB

Description:

[AI generated] Rhea Vendors Group SpA is an Italy-based global company specializing in manufacturing vending machines for hot and cold drinks and snacks. Founded in 1960, the company utilizes advanced technology and innovative designs to deliver high-quality products. Their products range from custom-designed vending machines to fully automatic coffee machines. They cater to a broad range of industries, including offices, retail, and hospitality.


🕵️ Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 3

Third Party Employee Credentials: 0


External Attack Surface: 3


Infostealer Distribution


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuse register.it
MX Records
  • smtp.rheavendors.com.
TXT Records
  • MS=ms59637772
  • v=spf1 mx include:spf.protection.outlook.com include:26243323.spf02.hubspotemail.net -all
  • google-site-verification=oVpBvybC42SnrtQZHcfcLKECNjtvBVtxzknfpouOW_s
  • cisco-ci-domain-verification=7ef0070d6c2e905c114c35608d5193ac9cedadd8295b72ede1133b5fc1d65864
Cloud / SaaS Services Detected
HubSpot Microsoft 365 Cisco

Leak Screenshot:

Leak Screenshot