Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Discovered 2026-09-30 03:40 UTC
Est. attack date 2026-09-29
Country ZA
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Description:

legalwise.co.za zoominfo.com/c/legalwise/429691676 LegalWise (founded 1984, Johannesburg) is South Africa's leading legal-expenses insurance provider, with 350,000+ members and 1.1 million people covered across the country. For a monthly fee starting at ~R151 ($8), members get 24/7 legal advice, court-cost coverage up to R405,000 per case, and access to a network of 220+ partner law firms — helping ordinary people afford lawyers for labour, criminal, family and municipal disputes. The company has 400–800 staff, offices in all nine provinces plus Botswana and Namibia, and handles 125,000+ consultations and ~70,000 new cases a year. It sits inside the LEGA insurance group (with insurer LEZA), where 62% was bought by black-owned investment firm Sithega in 2023 while Hollard kept 38%; group gross premiums run ~R800–850 million/year. Led by CEO Siva Gengan

Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 3

Third Party Employee Credentials: 1


External Attack Surface: 3


Exposure Report
by ParanoidLab
162
Passwords
2 critical
177
Cookies
0 critical
Last queried 2026-09-30 03:40 UTC

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • za-smtp-inbound-1.mimecast.co.za.
  • za-smtp-inbound-2.mimecast.co.za.
TXT Records
  • v=spf1 redirect=_s5xjamsju.sdmarc.net
  • MS=61892930AE5F204433EC65F5CE6116E8D3683F32
  • everlytic-site-verification=e16d3313d67499d2bd0a16b28ec25fb28b56a2620bba93829486ced83fbfcf4691d44e6c52e27588289e8cc3338fb39cbf0384bd39d1d67368f16af9f510e9eb
  • openai-domain-verification=dv-srMoQ54JmsggdX5sl1kBoTmx
  • facebook-domain-verification=2h6l83sg31rlnb2h0j29z7iwjz6fdf
  • google-site-verification=bjEEr_RVTpjtxCBQrw_V9581WJxkkg1vA0655iPOTws
Cloud / SaaS Services Detected
OpenIA