Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo pace-usa.com

Group: cactus

Discovered by ransomware.live: 2025-02-24

Estimated attack date: 2025-02-06

Country: US

Description:

<p>Originally founded as Integrity Dash, the company specialized in local express custom delivery. Its mission was to provide opportunities for urban youth to develop the skills necessary to make a successful transition to adult independence, stability, and employment. The corporation was immediately successful, but its structure limited its ability to expand. From that worthy foundation, Pace was formed in 1997 and has been delivering customized logistics solutions for its customers ever since. While Pace has grown and evolved, its close ties to local communities and its commitment to providing quality job opportunities have remained constant.</p><p>Website: <a href="https://www.pace-usa.com/">https://www.pace-usa.com/</a></p><p>Revenue : $134.4M</p><p>Address: 5951 Greenwood Pkwy, Bessemer, Alabama, 35022, United States</p><p>Phone Number: (866) 410-7222</p><p><mark class="marker-yellow"><strong>Download link #1:</strong></mark> <a href="https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/PACE-USA/PROOF/">https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/PACE-USA/PROOF/</a></p><p><mark class="marker-yellow"><strong>Mirror:</strong></mark> <a href="https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/PACE-USA/PROOF/">https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/PACE-USA/PROOF/</a></p><p><mark class="marker-yellow"><strong>DATA DESCRIPTIONS:</strong></mark> Personal identifiable information, Corporate confidential data, Customer information, Financial documents, Employees\executives personal data, Corporate correspondence.<br><img src="/uploads/5_c4673678db.png" alt="5.png"><img src="/uploads/1_6f035a0736.png" alt="1.png"><img src="/uploads/3_eee426914e.png" alt="3.png"><img src="/uploads/4_a3ecc920a9.png" alt="4.png"><img src="/uploads/2_6468dc2c6b.png" alt="2.png"></p>


🕵️ Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 2

Third Party Employee Credentials: 3


External Attack Surface: 1



DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuse godaddy.com
MX Records
  • paceusa-com01b.mail.protection.outlook.com.
TXT Records
  • v=spf1 ip4:69.38.54.202 ip4:66.182.137.126 include:spf.protection.outlook.com include:servers.mcsv.net include:spf.mandrillapp.com include:send.zcsend.net include:spf.US.exclaimer.net ~all
  • MS=ms13586692
Cloud / SaaS Services Detected
Microsoft 365 Mandrill

Leak Screenshot:

Leak Screenshot