PULSE
FEED
ransomhyflock reclama a Ateşsan Ambalaj · TR · Manufacturingransompear reclama a Neiman & Company, Inc. · US · Financial Servicesransomn0n reclama a Company #117 · USransomn0n reclama a Company #116 · USransomn0n reclama a Company #115 · USransomn0n reclama a Company #114 · USransomn0n reclama a Company #113 · USransombyod reclama a Michigan State University · US · Educationransomlockbit5 reclama a synergy.co.id · IDransomshiba reclama a Tema Hwt · DEransomqilin reclama a fzmb GmbH, Forschungszentrum für Medizintechnik und Biotechnologie · DE · Healthcareransomqilin reclama a Global Holding · Otherransomwhitearmor reclama a AmplifAI (GoDaddy instance) · US · Technologyransomdirewolf reclama a My Cloud Grocer · GB · Retail & E-Commerceransomhyflock reclama a Ateşsan Ambalaj · TR · Manufacturingransompear reclama a Neiman & Company, Inc. · US · Financial Servicesransomn0n reclama a Company #117 · USransomn0n reclama a Company #116 · USransomn0n reclama a Company #115 · USransomn0n reclama a Company #114 · USransomn0n reclama a Company #113 · USransombyod reclama a Michigan State University · US · Educationransomlockbit5 reclama a synergy.co.id · IDransomshiba reclama a Tema Hwt · DEransomqilin reclama a fzmb GmbH, Forschungszentrum für Medizintechnik und Biotechnologie · DE · Healthcareransomqilin reclama a Global Holding · Otherransomwhitearmor reclama a AmplifAI (GoDaddy instance) · US · Technologyransomdirewolf reclama a My Cloud Grocer · GB · Retail & E-Commerce
Ransomware · Claim18 septiembre 2026 · 07:06 UTC
CLAIMreclamada porENDZONE

AT&T

att.com

PaísUSUnited States
SectorTechnology
Datos claveREGISTRO
Monto de rescateNo revelado
Tamaño de datos exfiltradosNo revelado
Screenshot del leakNo
Prensa mencionada por el grupoNo
Descripción

Revenue: $125.6 billion Initial access was via a CX contractor doing business with AT&T. Access originally used as vehicle for Equipment Changes/Call Forwarding (thanks a lot TORCH patch) - VPN + HVD (both external and internal MyDesktop) instances were accessed for a prolonged period without any detection or incident response taking place. Certificates exported from certlm in the VDI + OPUS self installer (automatically joins EP to S1) opened up the door to the VPN. Salesforce data was accessed via a project manager ATTUID + a DirecTV contractor who for some reason had the apps available in Salesforce. AT&T CSO, if you are reading this, you are to contact us ASAP!

Otras víctimas del grupo · ±48h1
HaceVíctimaPaísSectorTamañoCap.
45d
Accela.comAccela.com
USGovernment & Defense—○United States