Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Group Clop
Discovered 2024-12-24 23:05 UTC
Est. attack date 2024-12-24
Country US
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Description:

Presumed victim name: Hill Brothers Chemical Company - Cl0p announcement. We have data of many companies who use cleo. Our teams are reaching and calling your company and provide your special secret chat.

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abusename.com
MX Records
  • d191325b.ess.barracudanetworks.com. Barracuda
  • d191325a.ess.barracudanetworks.com. Barracuda
TXT Records
  • MCqx75kq
  • ppe-bfa684744b9442498672
  • 6e19b0c85f1303711a991407ca057bbf
  • v=spf1 ip4:199.192.83.138 ip4:174.79.33.204 include:spf.protection.outlook.com include:spf.ess.barracudanetworks.com include:amazonses.com include:spf-westus.emailsignatures365.com ~all
  • 89lj78cnf02s66lh4q8g8do8kf
  • sophos-domain-verification=2479ac4147c66e377ba9827a8e75641da2226a1a6e0a3046ce9b1d08e22f9f27
Cloud / SaaS Services Detected
Amazon SES/WorkMail Sophos

Leak Screenshot:

Leak Screenshot