Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Logo

CACG

cacg.fr
Group 8base
Discovered 2023-12-13 10:08 UTC
Est. attack date 2023-12-13
Country FR
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Description:

The CACG manages, operates and maintains a set of strategic hydraulic structures on behalf of the State, including the Neste system, essential to the water supply of the rivers of Gascony. The richness and complementarity of the professions that it has been mobilizing for almost 60 years in the fields of water, development and the environment allow it today to build tailor-made teams to meet the challenges of the ecological transition and support project leaders. In France as well as internationally, the CACG supports local actors in the face of the challenges of climate change. cacg.fr

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • nddadista.fr
  • nddrmi.fr
  • informatcacg.fr
MX Records
  • vade-mx-fr01.hornetsecurity.com.
  • vade-mx-fr02.hornetsecurity.com.
  • vade-mx-eu-fallback01.hornetsecurity.com.
  • vade-mx-eu-fallback02.hornetsecurity.com.
TXT Records
  • s8y+MJKimSGMpEEWxCHH3Hc31g0IGK9XV7wasiiVYMVvC0jIiiZdnI81Pys82oDMoAiXeeiQnsNhKiuy0x60yg==
  • v=spf1 a ip4:37.58.135.165 ip4:195.15.209.180 include:spf.protection.outlook.com include:spf.hornetsecurity.com -all
  • MS=B5AF2D6611B9D0336746EF8C6F5045B2FA2B947B
  • MS=ms72460601
  • google-site-verification=uobtCzVvR8TNz77ceHHNGZxJSdTSvvW6LwfY8ucMUjE
Cloud / SaaS Services Detected
Hornetsecurity Microsoft 365

Leak Screenshot:

Leak Screenshot

Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data. This platform indexes only publicly visible information posted by ransomware operators and open web sources without accessing or obtaining the underlying stolen content. The service is provided to support public awareness, legitimate research, and cyber-resilience. No stolen personal or confidential data is collected or distributed via this site.