Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo awimc.com

Group: cactus

Discovered by ransomware.live: 2024-12-23

Estimated attack date: 2024-11-11

Country: US

Description:

<p>Real Estate.<br><br>“AWI Management Corporation is a highly experienced property management firm specializing in providing property management services for owners and developers of affordable housing. AWI is dedicated to providing its clients with exceptional service and experienced representation with an emphasis on integrity, dependability and competence.”<br><br>Website: <a href="https://www.awimc.com/">https://www.awimc.com/</a><br><br>Revenue : $102.7M<br><br>Address: 120 Center St At, Auburn, California, 95603, United States<br><br>Phone Number: (530) 745-6170<br><br><mark class="marker-yellow"><strong>Download link #1:</strong></mark> &nbsp;<a href="https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/AWIMC/PROOF/">https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/AWIMC/PROOF/</a><br><br><mark class="marker-yellow"><strong>Mirror:</strong></mark> <a href="https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/AWIMC/PROOF/">https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/AWIMC/PROOF/</a><br><br><mark class="marker-yellow"><strong>DATA DESCRIPTIONS:</strong></mark> Personal Identifiable Information (both employees and tenants), financial documents, executives and employees personal data, customer personal information, corporate confidential data and correspondence, etc.</p><p><img src="/uploads/Viscaya_104_B_2022_CYC_511ad07183.png" alt="Viscaya 104B 2022 CYC.png"><img src="/uploads/205_2_A_Olivia_Nunez_1st_year_1_e281462669.png" alt="205-2A Olivia Nunez 1st year (1).png"><img src="/uploads/M_Burke_drivers_license_2b1616965e.png" alt="M.Burke drivers license.png"><img src="/uploads/T_Williams_drivers_license_066490993e.png" alt="T.Williams drivers license.png"><img src="/uploads/De_Leon_Itzel_13e0a36d02.png" alt="De Leon, Itzel.png"></p>



DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain.operations web.com
MX Records
  • d179866b.ess.barracudanetworks.com.
  • d179866a.ess.barracudanetworks.com.
TXT Records
  • v=spf1 ip4:76.14.99.132 ip4:12.244.212.54 include:spf.protection.outlook.com include:spf.messagelabs.com include:spf.ess.barracudanetworks.com include:asp-spf1.yardi.com include:asp-spf2.yardi.com -all
  • 69d0irbkh4gt309vklu30uohcs.
  • MS=ms98100816
  • p5t02cnjbu2n4j3s467eaueivi
Cloud / SaaS Services Detected
Microsoft 365

Leak Screenshot:

Leak Screenshot