sofidel.com
sofidel.com
Group: cactus
Discovered by ransomware.live: 2024-06-18
Estimated attack date: 2023-10-06
Country:
Description:
Download link #1: https://***************.onion/SOFIDSAP/PROOF/Mirror: https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/SOFIDSAP/PROOF/DATA DESCRIPTIONS: Personal identifiable information, financial documents, employees and executives personal files, customer information, corporate correspondence, etc.
🕵️ Infostealer activity detected by HudsonRock
Compromised Employees: 6
Compromised Users: 3
Third Party Employee Credentials: 6
External Attack Surface: 6
DNS Records:
The following DNS records were found for the victim's domain.
WHOIS Emails
- domainabuse tucows.com
MX Records
- sofidel-com.mail.protection.outlook.com.
TXT Records
- apple-domain-verification=mCsatdogukK5oOjX
- spycloud-domain-verification=5d0fc7cd-6d05-402d-a9eb-04d94c684ecc
- MS=ms27754667
- v=spf1 ip4:5.97.176.234 include:spf.protection.outlook.com include:spf.emailsignatures365.com include:_spf.psm.knowbe4.com -all
- Etx7yX2RwlRrNVzQscoLNV12qVumTSG74Hf9E2OoaAzBnmMly32qo0dUSXDKtpouOGCWRO2H6g9cGceNkGEjuw==
- smartsheet-site-validation=Pskjw-R_LCepcVs3um7_MKqse5xdPgZt
- teamviewer-sso-verification=486b963da1b44c809723dfee5078d1de
- MS=CD69C23AA8523349110A0D936FD5BB45E9BB8A8B
Cloud / SaaS Services Detected
Apple
Microsoft 365
Teamviewer
KnowBe4
Leak Screenshot:
