Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo usmerchants.com

Group: blackbasta

Discovered by ransomware.live: 2024-02-22

Estimated attack date: 2024-02-13

Country: US

Description:

US Merchants is a vertically integrated packaging and distribution company. We purchase raw packaging materials and then use those ingredients to manufacture finished packaging products. Everything involved in producing and delivering clamshell blister packaging, two-piece blister packaging, blister cards, and our retail molded plastic products is done in-house from start to finish. This vertical operation reduces costs and helps to insulate suppliers, retailers, and end-customers from the reliability problems that result in more horizontal supply chains.SITE: www.usmerchants.com Address : Corporate Headquarters 8737 Wilshire Blvd Beverly Hills, CA 90211ALL DATA SIZE: ~245gb 1. Corporate documents 2. Employees folders 3. Payroll 4. Scans 5. HR / Accounting / Financial data and etc…



DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuse godaddy.com
MX Records
  • d276811a.ess.barracudanetworks.com.
  • d276811b.ess.barracudanetworks.com.
  • mx-01-us-west-2.prod.hydra.sophos.com.
  • mx-02-us-west-2.prod.hydra.sophos.com.
TXT Records
  • sophos-domain-verification=488adc26cb3852b5914f60809fc2eb80424a96ea
  • v=spf1 include:spf.protection.outlook.com include:_spf_uswest2.prod.hydra.sophos.com -all
  • sophos-domain-verification=efe8c622ab2a19bbd046886a5f99bf5d0e9951427929dcefe4a2d3b28abb7954
Cloud / SaaS Services Detected
Sophos

Leak Screenshot:

Leak Screenshot