Buy Me a Coffee

This space is available for sponsoring Ransomware.live Contact us to sponsor this space

Logo www.ugrocapital.com

Group: Ransomhub

Discovered by ransomware.live: 2024-06-10

Estimated attack date: 2024-06-05

Country: IN


🕵️ Infostealer activity detected by HudsonRock

Compromised Employees: 1

Compromised Users: 49

Third Party Employee Credentials: 4


External Attack Surface: 2



DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • itinfra@ugrocapital.com
  • trustandsafety@support.aws.com
MX Records
  • ugrocapital-com.mail.protection.outlook.com.
TXT Records
  • zoho-verification=zb52080263.zmverify.zoho.in
  • 5m1s71hspq0e6nr23pctulb2s6
  • duo_sso_verification=xvIjM8vt5sFPgj6K2KhhtvuUsjxGdZBCNug6tKjg1uzs3NQkbjljvzUjqK6HW7hq
  • google-site-verification=Kv9unSuafJi3nyBqAtT86sJCiONQ3fEtBIrJKZ7nXu8
  • google-site-verification=gekdJR-wCO_CvBrzalaiuz6ZPvqjfI3H_lCHG_LxIPg
  • v=spf1 include:zohomail.in include:spf.protection.outlook.com include:amazonses.com -all
Cloud / SaaS Services Detected
Amazon SES/WorkMail Zoho Campaigns Cisco Duo

Leak Screenshot:

Leak Screenshot