Discovered
2024-09-25
Est. attack date
2024-09-12
Country
Description:
<p>Membership Organizations<br><br>“KJ Tait Engineers provides professional consultancy for the design and management of engineering services for buildings and associated infrastructure throughout the UK. We are a professional practice of Mechanical and Electrical and Public Health (MEP) building services engineers with offices in Aberdeen, Cambridge, Edinburgh, Glasgow, and London.”<br><br>Website: <a href="https://kjtait.com/">https://kjtait.com/</a><br><br>Revenue : $18.8M<br><br>Address: 42 Union Ter, Aberdeen, Aberdeenshire, AB10 1NP, United Kingdom<br><br>Phone Number: +44 1224621794<br><br><mark class="marker-yellow"><strong>Download link #1:</strong></mark> <a href="https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/KJTAIT/PROOF/">https://6wuivqgrv2g7brcwhjw5co3vligiqowpumzkcyebku7i2busrvlxnzid.onion/KJTAIT/PROOF/</a><br><br><mark class="marker-yellow"><strong>Mirror:</strong></mark> <a href="https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/KJTAIT/PROOF/">https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/KJTAIT/PROOF/</a><br><br><mark class="marker-yellow"><strong>DATA DESCRIPTIONS:</strong></mark> Personal Identifiable Information, database backups, corporate documents\contracts\projects\drawings, employees personal data, customer information, financial documents, corporate correspondence, etc.</p><p><img src="/uploads/Bob_Passport_91d43bfd17.png" alt="Bob Passport.png"><img src="/uploads/KJT_Abbott_Confidentiality_Statement_f7c6d55b0a.png" alt="KJT-Abbott Confidentiality Statement.png"><img src="/uploads/MT_734d847fa9.png" alt="MT.png"><img src="/uploads/23_05_22_A0423_KJT_ZZ_XX_RP_E_0001_Electrical_Services_ACC_comments_added_38fed08014.png" alt="23.05.22 A0423-KJT-ZZ-XX-RP-E-0001-Electrical Services ACC comments added.png"><img src="/uploads/RU_Drivers_Licence_acfe7f108d.png" alt="RU - Drivers Licence.png"></p>
DNS Records:
The following DNS records were found for the victim's domain.
- eu-smtp-inbound-1.mimecast.com.
- eu-smtp-inbound-2.mimecast.com.
- iFMz1bngX89hYKdKfDePyXY2qT27H5ep/35kV5EWLEqb4gN22oeCcwoGMIEOVraHONPiWa8R/ofpqdy4GF8N2g==
- v=spf1 mx include:eu._netblocks.mimecast.com -all
- MS=ms47862201
- y5d1Iw37gxlYr/F+7WhMAOuYb2pMHrVoLCVWyvcWh3FAt7zdWoEioSudMudPR9u6v/+UvawcSCdU+Z80hzQOxQ==
- 0ed1fe018ab4af83202e434c23a19105b5f12c2a84
- MS=FD94119225E030BA69BFA00DA0C8692BEB2FD7F1
Cloud / SaaS Services Detected
Microsoft 365
Mimecast
Leak Screenshot:
Legal Disclaimer:
Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
This platform indexes only publicly visible information posted by ransomware operators and
open web sources without accessing or obtaining the underlying stolen content.
The service is provided to support public awareness, legitimate research, and cyber-resilience.
No stolen personal or confidential data is collected or distributed via this site.