Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo quakerwindows.com

Group: cactus

Discovered by ransomware.live: 2023-12-23

Estimated attack date: 2023-11-25

Description:

Download link #1:  https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/QUAKER/PROOF/ 



DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain.operations web.com
MX Records
  • mx2-us1.ppe-hosted.com.
  • mx1-us1.ppe-hosted.com.
TXT Records
  • ppe-2b38e8861187966d28e3b9eff0e56f10eef3a1d6
  • atlassian-domain-verification=SFvpaV5812uoK2H3GmjkkFez48FkgpxPgZ6WL0hAlhxc/97ggtPhUHpta5ARKjSN
  • apple-domain-verification=7pTCiNT0HkMiiSko
  • smartsheet-site-validation=q4SbtV79wZRLTVKETd_o53btvJCFJu49
  • pardot959422=d22bf6b8ac3bbbfb191a15ab209b8dff5ad6b8f3228d284a454d94ec7fc95879
  • google-site-verification=GiZbJbbMYaCIbiyUM3kITJz83LPrte1I_Q6bUY-dhz4
  • v=spf1 redirect=quakerwindows.com.hosted.spf-report.com
  • atlassian-sending-domain-verification=2c6147b0-dcca-4cd6-81cc-e564cff1eff7
Cloud / SaaS Services Detected
Apple Atlassian Salesforce