busin#####
busin#####
Group: clop
Discovered by ransomware.live: 2024-12-24
Estimated attack date: 2024-12-24
Country:
Description:
Presumed victim name: Businessolver - Cl0p announcement. We have data of many companies who use cleo. Our teams are reaching and calling your company and provide your special secret chat.
DNS Records:
The following DNS records were found for the victim's domain.
WHOIS Emails
- trustandsafety support.aws.com
- d46f7533-9604-4e86-a082-74aed474aa3c identity-protect.org
MX Records
- businessolver-com.mail.protection.outlook.com.
TXT Records
- pendo-domain-verification=83pm0PRUdAk5QB_w2zsCNqLarH0
- v=spf1 mx include:spf0.businessolver.com include:378546.spf07.hubspotemail.net include:mg-spf.greenhouse.io include:spf.protection.outlook.com include:spf.messagelabs.com include:_spf.salesforce.com ip4:34.228.98.125 ~all
- atlassian-domain-verification=izpW7la4D26x0rTc7mUhEO7cGEau2zWmkB7iI42EA1paSJd2g9NUEOX0KxcDyvQH
- docusign=322e709d-d659-4586-9078-aaabbb2c2f01
- f505ea63-f9cd-4817-b9ad-00f85c2632f1
- google-site-verification=TlgoAv0RVgL52fDoavI2VziqERawHbe2tRaI5_zLMtU
- google-site-verification=pDu7pCFET4HEGSwbRCVhir8Gn0wDSxrx-2mxAcicQ_g
- ibmid=2041f179-2c08-4eab-b5bd-f1323254049e
- jamf-site-verification=8-xQvj3zLwcp45abuDneYQ
- onetrust-domain-verification=3c564bdb96e747b8bc1a251c0b7dd375
- onetrust-domain-verification=af573d3f91374232a85473ca63b18aeb
- openai-domain-verification=dv-I4Grd03E0TR6W9lRogJA7wYd
Cloud / SaaS Services Detected
Atlassian
HubSpot
Salesforce
JamF
OneTrust
DocuSign
Leak Screenshot:
