Buy Me a Coffee

Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo cmactrans.com

Group: blackbasta

Discovered by ransomware.live: 2024-05-04

Estimated attack date: 2024-03-31

Country: US

Description:

CMAC Transportation is a family-owned, veteran-owned transportation, logistics, and warehousing provider located in Brownstown, MI.SITE: www.cmactrans.com Address : 20450 Sibley Road. Brownstown, MI 48193 USAALL DATA SIZE: ~200gb+ 1. HR 2. Finance 3. Personal 4. Personnel Files & etc…


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain.operations web.com
MX Records
  • mx2-us1.ppe-hosted.com.
  • cmactrans-com.mail.protection.outlook.com.
  • mx1-us1.ppe-hosted.com.
TXT Records
  • _stbq5wrh2lv8ig6ogtjyj0f4haozvhe
  • ppe-9776ce59046b67c46f749f0d147eda8828e04515
  • MS=D572A47A8B32F0688857F3587C92BE2B25DBE834
  • 1password-site-verification=BSL3ATWCPFEFNGHE5LAALKMUVY
  • google-site-verification=HUX2EHPboLY4o7jPzx-Z-r2GnyNVokluLWCjzZLWRZo
  • v=spf1 ip4:208.72.101.91 ip4:208.72.101.90 ip4:207.254.210.114 ip4:130.250.169.40 ip4:20.94.79.72 a:dispatch-us.ppe-hosted.com include:spf.protection.outlook.com ~all
Cloud / SaaS Services Detected
Proofpoint Essentials

Leak Screenshot:

Leak Screenshot