Back Ransomware.Live

🏴‍☠️ Ransomhouse has just published a new victim : Pertamina

Ransomware.Live • September 17, 2026

Share: View original

This domain's FortiOS SSL-VPN credentials were exposed via the "FortiBleed" leak ( CVE-2022-40684 ).

The following DNS records were found for the victim's domain.

jhqclkcftqr3m5xf5n3n8cjrfzfc1lt7

google-gws-recovery-domain-verification=52809464

google-site-verification=UFohwTqXAbb2rkbQfUsiYqUfBRII-NF1tzyxV-cmz-Q

MS=B4BC1AB77DAC47B33D1A4C45972AC1593671F926

w2pfmch1hmj505gsst3jhvkvt4vfj675

FEB4628D3B2507B534FE1FCAB54ADBBD2EBD1C8EA5B53A1B3D0C96B6688CB1E6

app-pertamina.azurewebsites.net.

2257759d-0184-4a30-960b-54bd94d96d9b

6vz2b6vml8dcr4pc32n7gdh1sgjlqxyx

v=spf1 a:o1.mxs3.pertamina.com include:spf.protection.outlook.com include:spf.messagelabs.com include:spf.mailtarget.co ip4:202.20.106.191 ip4:202.20.106.201 ip4:202.20.107.201 ip4:202.20.106.202 ip4:202.20.107.202 exists:%{i}.spf.hc1444-54.ap.iphmx.com -" "all

anthropic-domain-verification-7zay9f=rbgqTHKvrgLAOitn077WzAnJs

f4mb/2uAVTpOtzusCghBYrEz5l/Yc9H4rccY1B0/tcRVDHvIbaLvRTIYNTr7bJmk6rRkn+EBUQNSlihErdMnFQ==

google-site-verification=8Bx47pDr8O2O2xjd70u0QNe8eYR9qqEacilPvkYyKfE

Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data. This platform indexes only publicly visible information posted by ransomware operators and open web sources without accessing or obtaining the underlying stolen content . The service is provided to support public awareness, legitimate research, and cyber-resilience. No stolen personal or confidential data is collected or distributed via this site.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Ransomhouse Targets Pertamina in Latest Ransomware Attack Ransomhouse has claimed a new victim, Pertamina, following the exposure of FortiOS SSL-VPN credentials due to the 'FortiBleed' vulnerability (CVE-2022-40684). This vulnerability was publicly disclosed on October 18, 2022, and has been actively exploited since October 11, 2022. The attack has led to the publication of DNS records associated with Pertamina, indicating a significant breach. The incident follows a similar attack on the City of Fort Smith, Arkansas, which also involved the same CVE. Both attacks highlight the ongoing threat posed by ransomware groups exploiting known vulnerabilities. As of now, the extent of data exfiltration or operational disruption at Pertamina remains unclear. The situation emphasizes the need for organizations to patch vulnerabilities promptly and monitor their systems for unusual activity. 2 sources 69

Extracted Entities

🏴‍☠️ Ransomhouse has just published a new victim : Pertamina

The full story

Extracted Entities

Attack Types (1)

Campaigns (1)

Companies (1)

CVEs (1)

Domains (5)

IP Addresses (5)

Platforms (1)

Ransomware Groups (1)

SHA1 Hashes (1)

SHA256 Hashes (1)