Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Logo

Cadmet

cadmet.com
Group Royal
Discovered 2023-01-21 03:38 UTC
Est. attack date 2023-01-21
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Description:

At Cadmet, when we look at our customers, we don’t see job titles. We see the people behind the titles. Our business is built on human connections and strong relationships. Building them. Growing them. Sustaining them. Never taking a single relationship for granted. Ever.We are pleased to say that our approach to business – and people – has paid off. 2017 marked our 30th Anniversary as one of the first Sony Medical Dealers in the nation. Today we are one of Sony Medical’s largest nationwide dealers, with a reputation for excellent service and fair prices. And we enjoy great recognition in the medical community through our decade-long participation at regional and national trade shows that support the following industry groups:AORN – Association of periOperative Registered NursesASCA – Ambulatory Surgery Center AssociationSGNA – Society of Gastroenterology Nurses and AssociatesBiomedical Engineering Societies
Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 5

Third Party Employee Credentials: 0

External Attack Surface: 2

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain.operationsweb.com
MX Records
  • cadmet-com.mail.protection.outlook.com. Microsoft 365
TXT Records
  • omvrrnphdgcunt2pkch1tcq3im
  • 7Q69AZHCWB7M8NZKKG3U2BYGQK4WQNVF
  • jdgmf1n7i6rq7vvp9ep6fsvfus
  • 8li7s7ve3r1mpjkog6018p1e06
  • v=spf1 a ip4:70.89.33.147 a:mail.cadmet.com ip4:85.187.146.235 ip4:68.66.224.48 include:spf.protection.outlook.com include:spf.a2hosting.com include:_spf.createsend.com -all
  • j62ywhd843ppp3qb2vdvyc05d4p9kkpk
  • v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qU1wT+OnD+pMAYq36n23xct8f4QSbeV9dLsiJLhg+i0B16eorNWhsJKjCz/aXymRKJ4U7RlJTmckvjbfKBk95BGgji6v+xp5X1CiXiCOFi34lT2V7OWpObdq5WcKQ74/yIKfeUlGddi8GEYtFADdM+/9ALY+rATO7B873M35yQdu81DjC0YdZ4CwBQKaJY6g" "odwmqS0KYxU1+xND8gM6HzQWDz/lazLsYmexDoX9sVNCKmR7zYCyohlZzwaN8brF7iNgrQF8CEx4Rj5dQ3cGcTU6NP1YIpn0WKZBqGwxQuj1CqeeSE5KvCuQ6sbjQ75KfAb9DwtTbzAv2l/On1w6wIDAQAB;
Cloud / SaaS Services Detected
No well-known cloud or SaaS service detected.

Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data. This platform indexes only publicly visible information posted by ransomware operators and open web sources without accessing or obtaining the underlying stolen content. The service is provided to support public awareness, legitimate research, and cyber-resilience. No stolen personal or confidential data is collected or distributed via this site.