Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo ghimli.com

Group: cactus

Discovered by ransomware.live: 2024-04-23

Estimated attack date: 2023-08-26

Country: AU

Description:

Download link #1Ghim Li is a global textile and apparel supply chain manager of casual lifestyle knitwear apparel to major U.S. retailers. We supply over 62 million garments a year through our global marketing and manufacturing network. We offer you a total solution package with an integrated one-stop service approach, from in-house product design and development, commercialization of orders, material management, production planning and control, to comprehensive post manufacturing logistics solutions.Website: https://www.ghimli.com /Revenue : $189.1MAddress: 264 George Australia Square St L 42 Ste 4201, Sydney, New South Wales, 2000, AustraliaPhone Number: +65 6211 3600Download link #1: https://***************.onion/GHIMLI/fullMirror: https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/GHIMLI/full


🕵️ Infostealer activity detected by HudsonRock

Compromised Employees: 1

Compromised Users: 2

Third Party Employee Credentials: 2


External Attack Surface: 2



DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuse ascio.com
MX Records
  • ghimli-com.mail.protection.outlook.com.
TXT Records
  • ac10vj4mb8eq221hn1svpdjhtd.
  • v=spf1 ip4:118.189.121.189 ip4:118.189.19.13 ip6:2603:1096:100:31::2 include:spf.protection.outlook.com -all
  • ms=ms26134004
Cloud / SaaS Services Detected
Microsoft 365

Leak Screenshot:

Leak Screenshot