Back Ransomware.Live 🏴☠️ Krybit has just published a new victim : www.zhservices.com
This domain's FortiOS SSL-VPN credentials were exposed via the "FortiBleed" leak ( CVE-2022-40684 ).
The following DNS records were found for the victim's domain.
abuse support.gandi.net
7a5931f376742e7aca45bda1a514b3a2-4382312 .gandi.net
alt2.aspmx.l.google.com. Google Workspace
aspmx4.googlemail.com. Google Workspace
aspmx2.googlemail.com. Google Workspace
aspmx3.googlemail.com. Google Workspace
alt1.aspmx.l.google.com. Google Workspace
aspmx.l.google.com. Google Workspace
aspmx5.googlemail.com. Google Workspace
v=spf1 include:_spf.google.com ~all
Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data. This platform indexes only publicly visible information posted by ransomware operators and open web sources without accessing or obtaining the underlying stolen content . The service is provided to support public awareness, legitimate research, and cyber-resilience. No stolen personal or confidential data is collected or distributed via this site.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
