Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Discovered 2026-11-05 06:03 UTC
Est. attack date 2026-11-02
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Description:

megchem.com MegChem is a South African engineering consultancy founded in 1985 in Secunda, Mpumalanga, providing process, mechanical, structural, electrical and piping engineering for the petrochemical, oil and gas, energy and mining sectors. With over 350 engineers and offices in Secunda, Cape Town, Johannesburg and Richards Bay, it offers full lifecycle services from FEED studies through detailed design to construction supervision. It is strategically located next to Sasol Secunda, one of the world's largest petrochemical complexes, giving it direct access to major projects. Key sectors include coal-to-liquids, gas processing, refinery upgrades, power generation and water treatment. The company has completed projects across South Africa and Mozambique over 41 years of continuous operation. Its 8 engineering disciplines under one roof enable integrated multidisciplinary delivery for large-scale industrial projects.

Infostealer activity detected by HudsonRock

Compromised Employees: 1

Compromised Users: 0

Third Party Employee Credentials: 1


External Attack Surface: 2


Exposure Report
by ParanoidLab
9
Passwords
3 critical
1
Cookies
0 critical
Last queried 2026-11-05 06:03 UTC

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • infokonsoleh.co.za
  • domainabusetucows.com
MX Records
  • megchem-com.mail.protection.outlook.com. Microsoft 365
TXT Records
  • google-site-verification=2tr65J3M4tzNICLWm_6lCV0MHgzR-_YewKjU-CuB3GA
  • fv2aeop5parbvc58o7e5nlb5ue
  • MS=ms99446256
  • v=spf1 include:spf.protection.outlook.com -all
  • google-site-verification=RG2ivRaBcA_66YRSSO4njAU8nEIl9iNQb5LSF3h96bk
Cloud / SaaS Services Detected
Microsoft 365

Other recent victims