Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Discovered 2023-10-16 08:35 UTC
Est. attack date 2023-09-28
Country US
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation
Duplicate Entry
This victim has been identified as a duplicate of another entry in our database. However, this may not always be the case: the same organization can be targeted multiple times by the same or different ransomware groups, which may result in separate legitimate entries. Search for related entries

Description:

Ampersand is a data-driven TV advertising sales and technology company. We reach 116 million multiscreen households, providing viewership insights and planning on 42 million households, in 200+ DMAs, across more than 165+ networks and in all dayparts. Meet Ampersand. The vision for NCC Media was born by a couple, Linda and Bob Williams, in Boston in 1981. Originally called New England Cable Rep, these two entrepreneurs ambitiously set out to unify cable inventory so that an advertiser could have a simpler way to buy cable programming in the local TV market.SITE: www.ampersand.tv Address 151 W 42nd St Fl 11 New York City, New York 10036, United States

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuseweb.com
MX Records
  • ampersand-tv.mail.protection.outlook.com. Microsoft 365
TXT Records
  • sending_domain1020482=0f401f9ad2232a26ec73859074ae02cd3cbd38f2138bae15c6675e62344cb334
  • apple-domain-verification=DwoxwhakKOo8Iqiz
  • MS=ms80893910
  • docusign=774c929c-18e0-4899-8bbd-06b62b79d4e3
  • slack-domain-verification=39mPuqOrviBaCT6x39XpXgZ9Re7KuN7CMs5YwT0B
  • v=spf1 mx a ip4:3.225.154.53 ip4:63.97.151.0/24 ip4:8.9.70.0/24 ip4:216.143.178.0/24 ip4:50.227.87.0/24 include:spf.protection.outlook.com include:mail.zendesk.com include:sendgrid.net include:okta-mail.ampersand.tv include:okta-prod.ampersand.tv include:" "okta-ext.ampersand.tv include:_spf.salesforce.com include:dayforcehcm.com -all
  • wrike-verification=NTU3MzE1NjowNDIyNDRiODdhNjY2N2U0OGM3MzU5ZDQzOTJlMTJlMzExYmZmMTAzMTBkMj
  • dkejg3v2st3diqs8fv4csq7lv8
  • 93gNx20CDG2UyIkVcgw+J7sZr43oPVzqlqvIUgDGatd9eQ0luUxaCU2DHiMX20q0rch73k2pquzsWZD+7NL+oQ==
  • mandrill_verify.GNqTO2uEtJkpUEySWqxxqg
  • GwhdsCWN6XDNqo80FO7S/lOirF6v0QiMdpJ5hDJ+gySAqEPYwSENBGqSflaqFM5LPbK35XmLOKTBy9GzdnLZWw==
  • 889160e8bab05413374ee8f595346d0c
  • ZOOM_verify_7PynmAsbRauCOvD6HHlmUQ
  • pardot1020482=070da1acd1764c67bf6f90aad34c723222fad5c3364d72787041b35cc7183948
  • anthropic-domain-verification-45b70c=y5GDf6NrH7x3TeD57Cpsiq3oi
  • 00d0b000000x706eaa
  • MS=E646656C694EEAB7043318DC4FEA57E01C4962C5
  • hibp-verify=dweb_vny79fax6rclhjfef1w42zv0
Cloud / SaaS Services Detected
Anthropic Apple DocuSign Mailchimp Microsoft 365 Salesforce SendGrid Slack Zendesk Zoom

Leak Screenshot:

Leak Screenshot