besttrans.com
besttrans.com
Group: cactus
Discovered by ransomware.live: 2024-04-01
Estimated attack date: 2024-03-18
Country:
Description:
Download link #1: https://***************.onion/BESTTRANS/PROOF/Mirror: https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/BESTTRANS/PROOF/DATA DESCRIPTIONS: Employees and executives personal folders, financial statements, payroll data, customer agreements, etc.
DNS Records:
The following DNS records were found for the victim's domain.
WHOIS Emails
- domain.operations web.com
MX Records
- besttrans-com.mail.protection.outlook.com.
TXT Records
- v=spf1 include:spf.protection.outlook.com include:voltron.fr8lab.com include:fr8lab.com -all
- google-site-verification=Q0YGVdVs7jk2R4B5IkSEqXcDaR6tE6_z840T8xgy0Zo
Cloud / SaaS Services Detected
No well-known cloud or SaaS service detected.
Leak Screenshot:
