sanyo-shokai.co.jp
sanyo-shokai.co.jp
Group: cactus
Discovered by ransomware.live: 2024-06-10
Estimated attack date: 2024-04-25
Country:
Description:
Download link #1: https://***************.onion/SANYOSHOKAI/PROOF/Mirror: https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/SANYOSHOKAI/PROOF/DATA DESCRIPTIONS: Personal identifying information, financial documents, customer data, engineering information, employee\executives personal files, corporate correspondence, etc.
🕵️ Infostealer activity detected by HudsonRock
Compromised Employees: 0
Compromised Users: 59
Third Party Employee Credentials: 0
External Attack Surface: 0
DNS Records:
The following DNS records were found for the victim's domain.
WHOIS Emails
- No emails found.
MX Records
- sanyoshokai-co-jp01c.mail.protection.outlook.com.
TXT Records
- worksmobile.certification.pjkkddbfeiomc7e00q.r0hsrsglvympgx.cszstpjp7
- google-site-verification=DxfKMRbq8mluJKw0ScCN2gCnyQ85rDp446m0_YWDhLk
- globalsign-domain-verification=lDAe-t3A6ZSC361pMHcYt5zRmxob0I3yyr3Qpy5Md5
- globalsign-domain-verification=uqHLu3_iXe-EsbmDTq8RbOJGyYDzYPpWgiIZc0vSZn
- v=spf1 +ip4:60.43.155.14 +ip4:103.9.166.41 +ip4:103.9.166.44 +ip4:52.69.200.89 +ip4:202.219.7.40 +ip4:202.219.7.41 +ip4:103.9.166.29 +ip4:103.9.166.24 +ip4:103.9.166.32 +ip4:103.9.166.35 +ip4:103.9.166.38 +ip4:54.92.75.34 +ip4:54.178.229.44" " include:sanyo-i.jp include:spf.betrend.com include:crmstyle.com include:m.sanyo-shokai.co.jp include:spf.protection.outlook.com include:amazonses.com include:shops.shopify.com ~all
- google-site-verification=1S0QPKkvOYuyhbbsJL-zBlWha1Fr6bIy1IPUES5W07I
- google-site-verification=Be6JZ7KS1yQ9KASLrocMuDvFuUk2AgUm8YRgOQwCnJc
- MS=ms91571759
- MS=0CEFC04C9651DB3D5EB74B712189528430403207
- apple-domain-verification=qbzWevWJntlo6RTA
Cloud / SaaS Services Detected
Apple
Amazon SES/WorkMail
Microsoft 365
Shopify
Leak Screenshot:
