Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

snatt.it

snatt.it

Discovered 2024-12-04 12:54 UTC
Est. attack date 2024-12-04
Country IT
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Description:

The Snatt Omlog Companies are global specialists in logistics and technology, primarily serving the luxury, fashion, and lifestyle sectors. They operate under the Snatt brand in Italy and as Omlog in other international markets. The company focuses on providing customized supply chain solutions and operational support for major brands and retailers worldwide.SITE: www.sogroupglobal.com | www.snatt.itSnatt Logistica SpA P. IVA: [REDACTED] Sede Legale: Campegine (RE) Via Kennedy n. 12/B, CAP 42040Omlog SpA P. IVA: 1[REDACTED] Sede Legale: Settala (MI) Via Giuseppe Di Vittorio n. 21, CAP 20049ALL DATA SIZE: ≈1.5tb 1. Financial data 2. Personal data 3. Confidential data 4. NDA’s & etc…

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • mailre1.sogroupglobal.com.
  • mailre4.sogroupglobal.com.
  • mailre2.sogroupglobal.com.
  • mailre3.sogroupglobal.com.
TXT Records
  • duo_sso_verification=Znc2sBRviPjnLvqiSNg4FMg7BHxmgngIHHkTUBcobmZSQMWX9nIRsNh7ZTV6apVv
  • have-i-been-pwned-verification=ad392ce6add69aca3c9707262e1d3221
  • MS=ms76546982
  • MS=53B67D29B95DEA5715BB624C7BBB0A4D645534C7
  • have-i-been-pwned-verification=dweb_lwyozwhro65t2836glyy6xys
  • v=spf1 mx a ip4:89.119.95.26 ip4:89.119.95.28 ip4:89.97.232.7 ip4:89.97.232.8 ip4:109.168.125.5 ip4:109.168.125.9 ip4:109.168.125.10 ip4:109.168.125.14 ip4:130.117.232.98 ip4:213.217.29.210 include:spf.protection.outlook.com include:spf-de.emailsignatures" "365.com include:_spf.salesforce.com -all
  • MS=ms97721494
Cloud / SaaS Services Detected
Cisco Duo Have I Been Pwned Microsoft 365 Salesforce

Leak Screenshot:

Leak Screenshot