Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

northernresponse.com

northernresponse.com

Group Cactus
Discovered 2025-02-06 19:26 UTC
Est. attack date 2024-01-17
Country CA
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Description:

<p>Retail.<br><br>“Located in Toronto, Ontario, Canada, Northern Response has been a pioneer in the Canadian market since 1984, building brands and scaling distribution via omni-channel marketing platforms including Live Shopping, TV, Print, Mass + Travel Retail and Online (TikTok, Facebook, Instagram, Twitter, Amazon etc.). ”<br><br>Website: <a href="https://northernresponse.com/">https://northernresponse.com/</a><br><br>Revenue : $17.4M<br><br>Address: 50 Staples Ave, Richmond Hill, Ontario, L4B 0A7, Canada<br><br>Phone Number: (905) 737-6698<br><br><mark class="marker-yellow"><strong>Download link #1:</strong></mark> <a href="https://[REDACTED].onion/NRESPONSE/PROOF/">https://[REDACTED].onion/NRESPONSE/PROOF/</a><br><br><mark class="marker-yellow"><strong>Mirror:</strong></mark> <a href="https://[REDACTED].onion/NRESPONSE/PROOF/">https://[REDACTED].onion/NRESPONSE/PROOF/</a><br><br><mark class="marker-yellow"><strong>DATA DESCRIPTIONS:</strong></mark> Personal identifiable information, database backups (including customers information), employees and executives personal folders, corporate OneDrive, financial data, legal docs, contracts\NDAs, corporate correspondence, etc.</p><p><img src="/uploads/RS_PASSPORT_5bdc6aba55.png" alt="RS PASSPORT.png"><img src="/uploads/LR_3_dd95e7a48e.png" alt="LR3.png"><img src="/uploads/Northern_Response_International_Ltd_20240331_95831d7424.png" alt="Northern Response (International) Ltd (20240331).png"><img src="/uploads/Personal_and_Confidential_NW_02_28_2023_A_1f8259f3d3.png" alt="Personal&amp; Confidential - NW02.28.2023A.png"><img src="/uploads/KWONG_MING_KO_Driver_Licence_0999d6b004.png" alt="KWONG MING KO_Driver_Licence.png"></p>

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abusegodaddy.com
MX Records
  • northernresponse-com.mail.protection.outlook.com. Microsoft 365
TXT Records
  • v=spf1 include:spf.protection.outlook.com -all
Cloud / SaaS Services Detected
No well-known cloud or SaaS service detected.

Leak Screenshot:

Leak Screenshot