Summary
Written by ThreatClusterfrom site fields, file listing, victim profile, leak post, screenshot, ransom noteThe group unsafe claims that data relating to 10 million Presentations.AI users and enterprise clients has been downloaded and saved to backups. The leak page identifies the victim as Presentations.AI, with domain presentations.ai, and lists named individuals Sumanth Raghavendra and Ravi Kasthuri; revenue is stated as $5 million. Publication status is countdown on the leak page, and 12 sample PNG filenames were published. The ransom note states that the data has been downloaded and backups saved and invites contact to obtain decryption keys for snapshots.
Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.
Victim profile
- Domains
- presentations.ai
- Platforms
- onion
- People named
- Sumanth Raghavendra Ravi Kasthuri
What was taken
www.presentations.ai and www.pitchdeck.io Sumanth Raghavendra and Ravi Kasthuri Data regarding 10 million users and enterprise clients has been downloaded and saved to my backups. If you need the decryption keys for all your snapshots, contact me to restore your infrastructure.
Ransom note
Published by the group on their leak site, reproduced verbatim.
www.presentations.ai and www.pitchdeck.io Sumanth Raghavendra and Ravi Kasthuri Data regarding 10 million users and enterprise clients has been downloaded and saved to my backups. If you need the decryption keys for all your snapshots, contact me to restore your infrastructure.
Also stated on the leak page
Fields this group publishes that do not map to a standard column. Labels are the site's own.
- Download Source Code
- http://ekfvptyjt5uwdxrfafu3pabzvn7yvuzy7qmk77liq3qu5smkt7lpkbad.onion/
- Data regarding 10 million users and enterprise clients has been downloaded and s
- Data regarding 10 million users and enterprise clients has been downloaded and saved to my backups.
- If you need the decryption keys for all your snapshots, contact me to restore yo
- If you need the decryption keys for all your snapshots, contact me to restore your infrastructure.
Leak-site images (4)
Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.