Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Discovered 2026-10-07 22:59 UTC
Est. attack date 2026-10-07
Country FR
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Description:

Réso specializes in secondary works, offering a wide range of products including ceilings, partitions, floors, technical floors, and facades. They provide modular and dry partitions, acoustic products, and various accessories, ensuring a comprehensive solution for construction needs. With numerous agencies across France and a team of specialists trained in the latest innovations, Réso serves a diverse clientele with thousands of available products. Their commitment to quality and service is reflected in their partnerships and significant projects. 676 GB of confidential information about their customers, partners, employees were stolen. The entire network was locked including nearly 8TB of Veeam backups. The company has failed to reach for an agreement.

Exposure Report
by ParanoidLab
542
Passwords
1 critical
9
Cookies
0 critical
Last queried 2026-10-07 22:59 UTC

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • 68b71d05-cd90-4c3c-ae7b-5c211d7840bez.o-w-o.info
  • e61094e4-6abc-42e5-9ad6-3223f0b5cf2dg.o-w-o.info
  • techovh.net
  • supportovh.net
MX Records
  • vade-mx-fr02.hornetsecurity.com.
  • vade-mx-eu-fallback02.hornetsecurity.com.
  • vade-mx-fr01.hornetsecurity.com.
  • vade-mx-eu-fallback01.hornetsecurity.com.
TXT Records
  • MS=2902D71E7568638663C97B5217F69372118FD9B4
  • brevo-code:5021473f61af61ac86c38644d45292e2
  • v=spf1 mx a ip4:176.31.148.96/28 include:spf.cloud.vadesecure.com include:spf.hornetsecurity.com include:spf.kyxar.fr include:spf.protection.outlook.com ~all
Cloud / SaaS Services Detected
Brevo Hornetsecurity

Leak Screenshot:

Leak Screenshot