Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo securityinstrument.com

Group: cactus

Discovered by ransomware.live: 2024-08-27

Estimated attack date: 2024-07-06

Country: US

Description:

Download link #1:  https://***************.onion/SIWILM/PROOF/Mirror: https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/SIWILM/PROOF/DATA DESCRIPTIONS: Corporate confidential data, Personal identifiable information, contracts, employees and executives personal files, financial documents, corporate correspondence, database exports\backups etc.



DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain.operations web.com
MX Records
  • d31411b.ess.barracudanetworks.com.
  • d31411a.ess.barracudanetworks.com.
TXT Records
  • google-site-verification=rBOnOj9ullPNY7WxYRB8x1Lm9j0mcrsj_o2oOS0x2K8
  • v=spf1 include:spf.protection.outlook.com include:ignitermr.com -all
  • MS=ms42354050
  • apple-domain-verification=2dBnKyqcCW475PfX
  • facebook-domain-verification=1nuxs759cba8chhhiex8d0j1oz0ga
Cloud / SaaS Services Detected
Apple Microsoft 365

Leak Screenshot:

Leak Screenshot