The Romanian branch of NTT DATA, has been listed as a victim by the RansomHub ransomware group.

host_c · July 3

The hackers allegedly exfiltrated 230 GB of data.

Ransom deadline: 05th Jul 24.

NTT DATA Corporation, with a revenue of 3.49 trillion JPY (approximately 25.48 billion USD) is a Japanese multinational information technology service and consulting company headquartered in Tokyo, Japan. It is a partially-owned subsidiary of Nippon Telegraph and Telephone.

Source: https://x.com/H4ckManac/status/1808026245180920082

yoursunny · July 3

Your victimisation has been doubled.

host_c · July 3

@yoursunny said: Your victimisation has been doubled.

THX, can I get 2x double victimisation ?

davide · July 3

You close all the ports, only leave tcp 22 open for convenience, and then you get:

backdoored SSH via liblzma
a malloc in openssh signal handler that only an cretin could write without malice
IPv6 localhost spoofing permitted by the kernel, again with a nonchalance that seems too casual
portmap and its collection of RCEs autostarted by default on Debian
systemd
fuck it all

host_c · July 3

@Calin

Any info if it was hosted with you ?

EDIT:

Ahh damn it, it is RansomHUB not PORNHUB. My mistake. So many HUB's.

root · July 3

@davide said:
You close all the ports, only leave tcp 22 open for convenience, and then you get:

backdoored SSH via liblzma

a malloc in openssh signal handler that only an cretin could write without malice

IPv6 localhost spoofing permitted by the kernel, again with a nonchalance that seems too casual

portmap and its collection of RCEs autostarted by default on Debian

systemd

fuck it all

You were running a honeypot?

davide · July 3

@root said:
You were running a honeypot?

Is that the current name of Debian Stable?

treesmokah · July 3

https://ransomwatch.telemetry.ltd/#/profiles?id=ransomhub

http://ransomxifxwc5eteopdobynonjctkxxvap77yqifu2emfbecgbqdw6qd.onion/cde6497e-2ea4-4a18-94f7-308d6c6f1118/

http://fpwwt67hm3mkt6hdavkfyqi42oo3vkaggvjj4kxdr2ivsbzyka5yr2qd.onion/

Downloading from Tor network, fast.
https://github.com/sn0b4ll/aria2-onion-downloader

*Only for educational purposes.

root · July 3

What does that data contain? Technical consultancy of other companies? Does it contain payment and confidential information.

AuroraZero · July 3

@root said:
What does that data contain? Technical consultancy of other companies? Does it contain payment and confidential information.

@host-c's porn stash and naked selfies

root · July 3

@AuroraZero said:

@root said:
What does that data contain? Technical consultancy of other companies? Does it contain payment and confidential information.

@host-c's porn stash and naked selfies

host_c · July 3

I, I, I, have no comment on the matter

The Romanian branch of NTT DATA, has been listed as a victim by the RansomHub ransomware group.

Comments