Skip to content
Leak-site post naming Formulatrix, captured by ThreatCluster

Formulatrix

everest

Ransomware leak-site victim intelligence · EN

Data size
455 GB
Files
19,285
Views
67,000
Posted
Jul 6, 2024
Country
US
Industry
laboratory automation

Summary

Written by ThreatClusterfrom site fields, file listing, victim profile, leak post, screenshot, ransom note

Everest claims Formulatrix is a victim, stating 455.76 GB across 19,285 files in the FTP/product-distribution layer and GitLab/source archives. The leak page describes a broad data set including product repositories, firmware and driver files, runtime configurations, application notes, help documentation, QA/release folders, datasets, calibration tools, and public patent references. The post indicates a countdown for publication, with the files to be published after the timer counts down, and notes that Formulatrix is named as the victim.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Platforms
GitLab STM32/CAN

What was taken

Formulatrix Technical and Product Portfolio Overview

Data categories
product repositoriesfirmware packagesdocumentationdatasetssource codepatent references
Leak site tags
gemaltorockmakerformulatorrockimager
File types seen
dll × 1zip × 1
Sample files (5)
rockimagernant-master.zip
RockMakerWeb
RockMaker.Drivers.dll
FASTTensorFlowDataset
fastdataset

Ransom note

Published by the group on their leak site, reproduced verbatim.

The files will be published after the timer counts down. The company still has time to get in touch with us

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

label
Countdown/publication note
value
The files will be published after the timer counts down. The company still has time to get in touch with us
open_count
42947
view_count
42567
latest_post
Formulatrix Jul 6
publication_notice
The files will be published after the timer counts down. The company still has time to get in touch with us
"Formulatrix Jul 6 2 posts 34k"
Formulatrix Jul 6 2 posts 34k
"The FTP/product-distribution layer contains 19,285 files totaling 455.76 GB."
The FTP/product-distribution layer contains 19,285 files totaling 455.76 GB.
"The files will be published after the timer counts down. The company still has
The files will be published after the timer counts down. The company still has time to get in touch with us
The files will be published after the timer counts down. The company still has t
present

Leak-site images (11)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
onion leak page11 KB
Logo of Keysight Technologies featuring a red waveform graphic and the company name in white text.
onion leak page128 KB
onion leak page11 KB
Logo featuring the text "mansfield" in a stylized font, with "FAMILY DENTISTRY" below it.
onion leak page1.4 KB
Logo featuring a stylized letter "P" with an arrowhead design in black and orange colors.
onion leak page7.5 KB
onion leak page5.8 KB
Logo featuring the text "Al-Futtaim" in blue, with "automotive" in a smaller font below it, accompanied by a geometric symbol.
onion leak page5.6 KB
The image features a logo with stylized figures in orange and blue, representing people, alongside the text "ALZONE" in a bold blue font.
onion leak page7.0 KB
Logo of Emirates Flight Catering, featuring stylized text and a decorative emblem.
onion leak page6.8 KB
Logo of Dharma Group featuring a stylized design with blue and green colors, accompanied by the text "DHARMA GROUP" below it.
onion leak page7.7 KB