Buy Me a Coffee

Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo espackeuro.com

Group: cactus

Discovered by ransomware.live: 2024-05-31

Estimated attack date: 2024-05-21

Country: ES

Description:

Download link #1:  https://***************.onion/SYSTEMS/PROOF/Mirror: https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/SYSTEMS/PROOF/DATA DESCRIPTIONS: Employees and executives personal and corporate data, financials, database exports, etc. 

🕵️ Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 1

Third Party Employee Credentials: 0

External Attack Surface: 0


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuse nicline.com
MX Records
  • espackeuro-com.mail.protection.outlook.com.
TXT Records
  • rbetgg5pbjbofv063q9oc40tnr
  • v=spf1 include:spf.protection.outlook.com -all
  • D09758DC3494517036BCB9C88B1134612BF55A7CC863003D2607011FECD2FDFE
  • google-site-verification=mTgCv9waHKSHCCMlflYFlAYnhP9ZZS60FcK-nJ02k5g
  • MS=ms65622852
  • MS=ms77910253
  • 4ij9fcjcpsfqqgh791dk2lvvjk
  • n84po59lct2fmkdavm5bv60u4b
Cloud / SaaS Services Detected
Microsoft 365

Leak Screenshot:

Leak Screenshot