Buy Me a Coffee

Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo rangeramerican.com

Group: cactus

Discovered by ransomware.live: 2024-09-03

Estimated attack date: 2024-08-05

Country: PR

Description:

Download link #1:  https://***************.onion/RANGERAMERICAN/PROOF/Mirror: https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/RANGERAMERICAN/PROOF/DATA DESCRIPTIONS: Personal Identifiable Information, customer info, contracts, employees\executives personal and corporate data, accounting\payroll, corporate correspondence, etc.


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain.operations web.com
MX Records
  • rangeramerican-com.mail.protection.outlook.com.
TXT Records
  • v=spf1 ip4:66.231.237.101 include:spf.protection.outlook.com include:amazonses.com -all
  • MS=ms976679996
Cloud / SaaS Services Detected
Amazon SES/WorkMail Microsoft 365

Leak Screenshot:

Leak Screenshot