Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Logo

TMA Group of Companies

tmagroup.com.au
Group Sarcoma
Discovered 2025-04-10 14:19 UTC
Est. attack date 2025-04-10
Country AU

Description:

TMA Group of Companies TMA Technology connects our customers, their visitors, and partners at the core of the customer experience with our all-in-one solution—simple, secure, and sustainable. Our digital solutions and high-quality hardware offer a comprehensive package that ticks all the boxes on your wish list. With open interfaces and seamless integration options, TMA Technology delivers exactly what you need in a simple, secure, and sustainable way. Best of all, our customer-focused approach makes it effortless to turn unknown visitors into loyal guests.Geo: Australia - Leak size: 1,1 TB Archive - Contains: Files, SQL
Infostealer activity detected by HudsonRock

Compromised Employees: 3

Compromised Users: 8

Third Party Employee Credentials: 6

External Attack Surface: 11

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • tmagroup-com-au.mail.protection.outlook.com. Microsoft 365
TXT Records
  • atlassian-domain-verification=OYkRhYDSPSQdq8O98bXReU6VJuwWvkN9ScgoQoI6fQGkM5ulJyBrgwg40nwiUYEa
  • v=spf1 mx a ip4:110.145.218.178 ip4:202.124.241.178 ip4:60.241.60.56 ip4:60.241.60.34 ip4:60.241.131.114 ip4:203.46.18.218 include:spf.atlassian.net include:spf.protection.outlook.com -all
  • 5uo3ded8bmpdo32iiik0murrr
  • pcyRXkLTCj/MlcPJUED6T6P3K+yUklobq7ZSvgL6FlcH8w+z/+kJGhL1UN/1WisuZh/olFWaMOcSX+iFDwVkHQ==
  • U01cbXB/CyIGU3uwMJwxpCfNf7VupOuhLp7lsAVSlVLSWYLz9HjT9HwJPd8DKh1UxSCoBX1cxk2kf5DYggMnKw==
Cloud / SaaS Services Detected
Atlassian

Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data. This platform indexes only publicly visible information posted by ransomware operators and open web sources without accessing or obtaining the underlying stolen content. The service is provided to support public awareness, legitimate research, and cyber-resilience. No stolen personal or confidential data is collected or distributed via this site.