Group:
Cactus
Discovered by ransomware.live: 2024-10-08
Estimated attack date:
2024-06-29
Country:
Description:
<p>Business Services.<br><br>“Founded in 1985 and headquartered in Tempe, Arizona, Corporate Job Bank is a staffing organization and a full service personnel firm providing temporary, temp-to-hire, and direct hire services ranging from the production personnel to the upper levels of management”<br><br>Website: <a href="https://corporatejobbank.com/">https://corporatejobbank.com/</a><br><br>Revenue : $22.8M<br><br>Address: 1955 E Broadway Rd Ste 102, Tempe, Arizona, 85282, United States<br><br>Phone Number: (480) 966-0709<br><br><mark class="marker-yellow"><strong>Download link #1:</strong></mark> <a href="https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/CJB/PROOF/">https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/CJB/PROOF/</a><br><br><mark class="marker-yellow"><strong>Mirror:</strong></mark> <a href="https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/CJB/PROOF/">https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/CJB/PROOF/</a><br><br><mark class="marker-yellow"><strong>DATA DESCRIPTIONS:</strong></mark> Personal identifiable information, corporate confidential documents\correspondence, employees and executives personal data, projects, customer information, etc.</p><p><img src="/uploads/Jesse_Vargas_ID_s_2623babe5f.png" alt="Jesse Vargas ID's.png"><img src="/uploads/Meseret_Desta_I_Ds_efdb1117b8.png" alt="Meseret Desta IDs.png"><img src="/uploads/Melissa_Ayala_IDS_d266d974a7.png" alt="Melissa Ayala IDS.png"><img src="/uploads/Gualupe_Chavez_ID_s_f2d46618f1.png" alt="Gualupe Chavez ID's.png"><img src="/uploads/Josefina_Canevett_ID_s_9df8608ba4.png" alt="Josefina Canevett ID's.png"></p>
Infostealer activity detected by HudsonRock
Compromised Employees: 0
Compromised Users: 17
Third Party Employee Credentials: 0
External Attack Surface:
5
DNS Records:
The following DNS records were found for the victim's domain.
- MS=ms18446061
- v=spf1 include:spf.protection.outlook.com include:_spf.act-on.net include:_spf.bullhornmail.com include:23916381.spf03.hubspotemail.net include:spf-westus.emailsignatures365.com include:corporatejobbank.com.spf.auto.dnssmarthost.net ~all
- google-site-verification=eF3XS04Ros32hvXYB1j3qeHZ5I9RpTkgYuTkrneAqmo
- google-site-verification=HauOgoeGjCy42MBJ4Y4E5KikehNG6wRfxuQHizPM2qE
- google-site-verification=1fyaqNbNOe2YfPyTdcXu9_Kjhr7a7u742ibGDA7YRbY
Cloud / SaaS Services Detected
HubSpot
Microsoft 365
Leak Screenshot:
Legal Disclaimer:
Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
This platform indexes only publicly visible information posted by ransomware operators and
open web sources without accessing or obtaining the underlying stolen content.
The service is provided to support public awareness, legitimate research, and cyber-resilience.
No stolen personal or confidential data is collected or distributed via this site.