Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Logo

Trevi Technology

www.trevi.cc
Group Orova
Discovered 2026-10-23 13:27 UTC
Est. attack date 2026-10-23
Country TW
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation
Data exfiltrated 435.87 GB

Description:

特雷維科技成立於2017年，特雷維這個名字來自英文Trevi，而Trevi是取自義大利羅馬著名景點「許願池-Fontana di Trevi」，我們的願望就是完成客戶的期望，甚至超乎客戶的期待。我們是個創新服務的團隊，非常重視每個細節，又具備整合性大局思考力。提供海外客戶平台，希望以先進軟體技術，整合資訊科技讓使用者有更好的體驗
Infostealer activity detected by HudsonRock

Compromised Employees: 1

Compromised Users: 0

Third Party Employee Credentials: 1

External Attack Surface: 3

Exposure Report
by ParanoidLab
62
Passwords
20 critical
0
Cookies
0 critical
Last queried 2026-10-23 13:27 UTC

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abusegodaddy.com
MX Records
  • mx3.larksuite.com.
  • mx2.larksuite.com.
  • mx1.larksuite.com.
TXT Records
  • cursor-domain-verification-jc4rgx=EUK6s8cqMLjgZi7ul2ZhLj053
  • v=spf1 +include:spf.onlarksuite.com -all
  • verification-code-site-App_lark=TODjgbuvLjG3vjy5OqhM
  • openai-domain-verification=dv-eERbpcDeJzlmsKdj6fIgnvo1
  • MS=ms11114486
Cloud / SaaS Services Detected
Microsoft 365 OpenIA

Leak Screenshot:

Leak Screenshot

Other recent victims

Same group: Orova
Same sector: Technology
Same country: Taiwan, Province of China

Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data. This platform indexes only publicly visible information posted by ransomware operators and open web sources without accessing or obtaining the underlying stolen content. The service is provided to support public awareness, legitimate research, and cyber-resilience. No stolen personal or confidential data is collected or distributed via this site.