Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Logo

Mr Bean

mrbean.com.sg/
Group Spacebears
Discovered 2024-04-29 06:39 UTC
Est. attack date 2024-04-26
Country SG
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Description:

Founded in 1995, Mr Bean is the leading chain soya bean food & beverage retailer in Singapore today. With more than 60 stores in Singapore & Asia, Mr Bean offers a variety of soya bean drinks and snacks. Young and old can enjoy refreshing ice blended flavoured soya drinks, ice-creams, pastries and more. Today, Mr Bean prides itself on a strong corporate philosophy of placing customers' interest as our top priority as we continue to emphasize on research to produce healthy and creative products with traditional nutritional values. With a visionary and dedicated management team, Mr Bean is poised to expand rapidly in the region. In 2023, Mr Bean ventured into Malaysia for the first time, marking its first foray into the country's market.
Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 1

Third Party Employee Credentials: 0

External Attack Surface: 1

Infostealer Distribution
FortiBleed Exposure Detected

This domain's FortiOS SSL-VPN credentials were exposed via the "FortiBleed" leak (CVE-2022-40684).

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • mrbean-com-sg.mail.dr.greenradar.com.
  • mrbean-com-sg.mail.sg.greenradar.com.
TXT Records
  • v=spf1 include:_spf.shopcada.com include:spf.protection.outlook.com ~all
Cloud / SaaS Services Detected
No well-known cloud or SaaS service detected.

Leak Screenshot:

Leak Screenshot

Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data. This platform indexes only publicly visible information posted by ransomware operators and open web sources without accessing or obtaining the underlying stolen content. The service is provided to support public awareness, legitimate research, and cyber-resilience. No stolen personal or confidential data is collected or distributed via this site.