Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Logo

SolidCAM

solidcam.com
Group Handala
Discovered 2024-06-10 11:37 UTC
Est. attack date 2024-06-10
Country US
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Description:

Hello to SolidCAM ! Handala Hacked SolidCAM (https://www.solidcam.com/). SolidCAM is an on-premise computer-aided manufacturing (CAM) program that handles and governs CNC milling procedures. It permits users to merge with other CAM and computer-aided design (CAD) interfaces and offers diverse tools to streamline milling and turning operations. This software was released for the first time by…
Infostealer activity detected by HudsonRock

Compromised Employees: 7

Compromised Users: 987

Third Party Employee Credentials: 18

External Attack Surface: 7

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • infodomain-contact.org
  • abusehetzner.com
  • abusehetzner.de
MX Records
  • solidcam-com.mail.protection.outlook.com. Microsoft 365
TXT Records
  • anthropic-domain-verification-ev3md4=DaFRCFko8BPZkzfF5X6ghVofe
  • openai-domain-verification=dv-m5TMjBGlJCenuXp6LHWrd6hJ
  • facebook-domain-verification=kdny1r9er8k46solzcovnip5oxufex
  • stripe-verification=A94388758225DB10D4E2CEE4BC34D5007F32448E74E2A916A04C4BA2ED9E6535
  • have-i-been-pwned-verification=dweb_m2t5ekwoja4ffhwi4xmb7f50
  • google-site-verification=aDUkiEJ0ahF_afpArKhLpqwazRQC5Xg3Xfcs1GjnJCE
  • atlassian-domain-verification=bmS6UA7ZJTxakUEoG4cq3iq8M50vvFLjIC6aEGnbramHim0slrVgoLQYz/yRfXnn
  • ms-domain-verification=97afba83-16d5-46cc-871c-7a6ab7623f07
  • logmein-verification-code=T7MhKp2vvNSPGcRN70iTOfz5d
  • google-site-verification=veleTfB-gV4yRJZ9ppK-3GQVJAgT7XuFOLkavjtCvQc
  • google-site-verification=xoe74vGHJuOecFZYTYe1DbGmZss4zCVAHlB94ZiLb7E
  • openai-domain-verification=dv-zHWx0mmv81j7EKgAmo1QmGYG
  • atlassian-sending-domain-verification=4cae28c7-3578-4d59-90e0-0f15a1870ace
  • v=spf1 a mx include:spf.protection.outlook.com include:spf.sendinblue.com include:aspmx.pardot.com include:_spf.salesforce.com include:46893741.spf05.hubspotemail.net ip4:78.46.167.82 ip4:134.119.50.143 ip4:93.187.234.137 ip4:152.193.66.222 ip4:212.179.15" "0.34 -all
  • MS=ms32544379
  • apple-domain-verification=h4Sh1UynnSrHy2UJ
Cloud / SaaS Services Detected
Anthropic Apple Atlassian Have I Been Pwned HubSpot LogMeIn Microsoft 365 OpenIA Salesforce Sendinblue Stripe

Leak Screenshot:

Leak Screenshot

Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data. This platform indexes only publicly visible information posted by ransomware operators and open web sources without accessing or obtaining the underlying stolen content. The service is provided to support public awareness, legitimate research, and cyber-resilience. No stolen personal or confidential data is collected or distributed via this site.