H-ISAC TLP Green Ransomware Data Leak Sites Report - August 26, 2021

New victims listed:

    ::: Blacktor ::: 

    ===========================

    Victim / Company Name    Date First Seen by Tracker

    -----------------------  --------------------------------

    2020/04                  2021-08-25 12:05:02.770479+00:00

    ::: Clop Leak Index ::: 

    ===========================

    Victim / Company Name                                             Date First Seen by Tracker

    ----------------------------------------------------------------  --------------------------------

    WDMANOR[.]COM FILES  PART1 PUBLISHED                              2021-08-25 17:05:03.323026+00:00

    MMALTZAN[.]COM FILES  PART1 PUBLISHED                             2021-08-25 17:05:03.323026+00:00

    COULSONGROUP[.]COM FILES  PART1 PUBLISHED                         2021-08-25 17:05:03.323026+00:00

    KSSENTERPRISES[.]COM FILES  PART1 PUBLISHED                       2021-08-25 17:05:03.323026+00:00

    RMICO[.]COM FILES  PART7 - FINAL PUBLISHED                        2021-08-25 17:05:03.323026+00:00

    GOABCO[.]COM FILES  PART6 PUBLISHED                               2021-08-25 17:05:03.323026+00:00

    PARAGONGRI[.]COM FILES  FILES PART2 - EXTRACTED EMAILS PUBLISHED  2021-08-25 17:05:03.323026+00:00

    ::: Conti ::: 

    ===========================

    Victim / Company Name                     Date First Seen by Tracker

    ----------------------------------------  --------------------------------

    Great Lakes Plumbing and Heating Company  2021-08-25 03:35:02.578803+00:00

    MIDPLAZA HOLDING                          2021-08-25 03:35:02.578803+00:00

    Americo Manufacturing                     2021-08-25 03:35:02.578803+00:00

    Hanwha Life Vietnam                       2021-08-25 21:35:03.074331+00:00

    ::: HiveLeaks ::: 

    ===========================

    Victim / Company Name    Date First Seen by Tracker

    -----------------------  --------------------------------

    MAS & Coronis Health     2021-08-25 08:35:01.793171+00:00

    ::: LockBit 2.0 ::: 

    ===========================

    Victim / Company Name         Date First Seen by Tracker

    ----------------------------  --------------------------------

    bangkokair[.]com              2021-08-25 09:05:01.971493+00:00

    conmoto[.]de                  2021-08-25 10:35:02.331370+00:00

    stetsonexpo[.]com             2021-08-25 10:35:02.331370+00:00

    nepgroup[.]com                2021-08-25 11:05:02.438798+00:00

    www[.]isoftstone[.][.][.][.]  2021-08-25 21:05:02.837342+00:00

Release Date
Aug 26, 2021

Alert ID 512e9276

View Alert

View the reports below. 

For help with Cybersecurity and Risk Advisory Services exclusively for AHA members, contact:

John Riggi

Senior Advisor for Cybersecurity and Risk, AHA

jriggi@aha.org

(O) +1 202 626 2272