Buy Me a Coffee

Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo savannahcandy.com

Group: ransomhub

Discovered by ransomware.live: 2024-09-21

Estimated attack date: 2024-09-20

Country: US

Description:

Savannah Candy Kitchen, found at savannahcandy.com, is renowned for its Southern confections, particularly pralines, divinity, and Southern pecan pies. Rooted in Southern tradition, the company combines family recipes with high-quality ingredients. They offer a wide array of sweets, gift baskets, and corporate gifts, delivering a taste of Southern hospitality to customers nationwide.

🕵️ Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 16

Third Party Employee Credentials: 0

External Attack Surface: 5


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuse ionos.com
  • dataprivacyprotected ionos.de
MX Records
  • savannahcandy-com.mx1.arsmtp.com.
  • savannahcandy-com.mx2.arsmtp.com.
TXT Records
  • klaviyo-site-verification=Tq9FwA
  • facebook-domain-verification=5ipuevrdh3iq4xdh3vx7bvthnibcz8
  • uo092mb0jmgagosdrqk99p6q78
  • v=spf1 include:commercev3.net mx a:mail.savannahcandy.com ip4:74.202.227.32/27 ip4:216.27.84.64/27 ip4:66.192.165.130/27 ip4:216.27.93.0/25 include:icpbounce.com include:servers.mcsv.net ~all
Cloud / SaaS Services Detected
No well-known cloud or SaaS service detected.

Leak Screenshot:

Leak Screenshot