Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

westfalia-automotive.com

westfalia-automotive.com

Group Cactus
Discovered 2024-06-24 22:13 UTC
Est. attack date 2024-06-24
Country DE

Description:

Download link #1:  https://***************.onion/MONOFLEX/PROOF/Mirror: https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/MONOFLEX/PROOF/DATA DESCRIPTIONS: Personal identifiable information, engineering data\drawings, employees and executives personal files, financial data, customer information, database exports, corporate correspondence, etc.

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • legalserviceseurodns.com
  • ArBeckerhorizonglobal.com
  • Richard.Hineswitter-towbars.co.uk
MX Records
  • westfaliaautomotive-com02c.mail.protection.outlook.com. Microsoft 365
TXT Records
  • oajvohgp94ienundldpeqbr4a0
  • v=spf1 a mx a:smtp.twt.net a:schwerin.westfalia.local ip4:151.189.99.119 include:spf.protection.outlook.com include:inxserver.com include:_spf.horizonglobal.com include:_spf.google.com include:spf.servicemail24.de -all
  • MS=ms32585366
  • Qwor8VoHm0I2tviUbr6nAhLP2tUgCYok9LpVCkHSfoc6W2SNPR6PmvTXbyaxMxsaRujh81MT+pLyWAczkjufpw==
Cloud / SaaS Services Detected
Microsoft 365

Leak Screenshot:

Leak Screenshot