Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Cameroon government troops leaked

mindef.gov.cm

Group Hyflock New Group
Discovered 2026-11-09 16:52 UTC
Est. attack date 2026-11-09
Country CM
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation
This is an emerging group, so this claim should be treated with caution until independently verified.

Description:

The core conclusion has already completed an analysis of the entire database's data volume sorted by table. It can be confirmed that this is a massive database containing over 6 million records, including nearly 1.35 million historical personnel records (HISTO_RECIP) and nearly 2.41 million core operation audits/history records (HISTO_OR). More seriously, the TMOUCHARD table contains nearly 1 million records—in French, 'Mouchard' means 'spy/listener/log monitor,' which indicates that the system's core activity audit logs have also fallen into the hands of the attacker. Below is a deep security breakdown of the non-empty tables sorted by data: 1. Precise Quantitative Analysis of Core Affected Assets By doing this, the attacker has effectively ranked the database's assets by value. The following types of data are in extremely high-risk status: 1) Core identities and historical records (totaling about 1.6 million+) • RECIPIENDAIRE (160,920 records) & DISTINCTION (161,481 records): Current roster of awarded/declared military and political personnel. • HISTO_RECIP (1,349,243 records): This is the largest core asset, containing detailed birth/death records, career histories, files, or background information for over 1.34 million historical personnel. • FGRADE_ARME (6,542 records): Military rank and branch correspondence, used to precisely identify high-value targets (such as generals and senior special forces officers). 2) System core audit logs have been 'reverse-forensicated' (nearly 1 million records) • TMOUCHARD (999,037 records): In French business systems, 'Mouchard' usually refers to backdoor logs, user activity tracking logs, or security audit tables. • Severe consequence: The attacker stole nearly a million audit logs, which means they didn't just take the data—they also learned the system administrators' routine checks, login times, and frequently accessed assets. They could use this knowledge to precisely hide their backdoors or even delete specific log entries without being easily noticed. 3) Full business process history (about 2.7 million+) • HISTO_OR (2,409,874 records): Possibly historical orders, commands, or core decision-making flows. • TRANSMIS_MEMOIRES (246,658 records) & HISTO_MEMOIRE (264,407 records): Over 500,000 memoranda, submitted documents, and transmission records. This involves a large amount of non-public official communications from the state, military, or government internal exchanges. ...

Exposure Report
by ParanoidLab
0
Passwords
0 critical
0
Cookies
0 critical
Last queried 2026-11-09 16:52 UTC

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • mail.mindef.gov.cm.
TXT Records
  • v=spf1 mx include:_spf.google.com a ip4:195.24.205.157 ~all
  • google-site-verification=TgONcj5h8fOwYK72KZo3wG0ewJ4n_AjtfHYM7Z9kGDc
Cloud / SaaS Services Detected
No well-known cloud or SaaS service detected.

Leak Screenshot:

Leak Screenshot

Other recent victims