Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Discovered 2026-09-15 07:08 UTC
Est. attack date 2026-09-14
Country US
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Description:

sarkujapan.com zoominfo.com/c/sarku-japan/33898946 SARKU Japan Japan's #1 independent service & wholesale network for foreign cars — founded 1993 in Chiba by Texan David J. Jones (in Japan since 1989) after seeing that owners of European/American cars in Japan were "orphans": parts take 6–8 weeks from Europe, service is scarce. SARKU built the full foreign-car infrastructure: 9 service centers (8 Kanto + Nagoya), a wholesale yard of ~4,000 imported cars (one of Japan's two largest), a parts warehouse of 30,000+ SKUs worth ¥700M+ (also one of Japan's two largest), plus procurement/export arms via US offices in Seattle (since 1997) and Florida — selling 20,000+ cars and serving 60,000+ active customers (~150 staff from 15 countries; ~120K monthly site visitors, 170K+ downloaded car-buying guides). Since 2018 it's owned by the Netherlands' Louwman Group (Europe's largest family-run dealer group, est. 1923). Motto: "Foreign cars. Japanese precision."

Infostealer activity detected by HudsonRock

Compromised Employees: 2

Compromised Users: 0

Third Party Employee Credentials: 0


External Attack Surface: 1


Exposure Report
by ParanoidLab
158
Passwords
12 critical
14
Cookies
0 critical
Last queried 2026-09-15 07:08 UTC

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • mx-02-us-west-2.prod.hydra.sophos.com.
  • sarkujapan-com.mail.protection.outlook.com. Microsoft 365
  • mx-01-us-west-2.prod.hydra.sophos.com.
TXT Records
  • v=spf1 include:spf.protection.outlook.com include:_spf_uswest2.prod.hydra.sophos.com -all
  • google-site-verification=JYzj_TNfudOpMSXTrytkux3kVOg2W_h7PJKCu5Q1q7U
  • 2TOMM26M1TK0BM2KF354DM2FT6
  • MS=03F881521CA9ED844E0B9CC2B0B1AEB44BD8E365
  • google-site-verification=ywDr27gSJRy8JfWUl_SNfcq5yKSJ6_fU3eKcf6NlGrM
  • duo_sso_verification=UPIALI2iOVTcT60Q2i4CB161iEaGXLrjIsJgzNuJRwJg0aC3zgnhT46SOzb3wx5j
  • Hai6zhZg1u4GbOk3BrpoO/m/uW6rfzDr1sergptA1PqYiY209ddrNnu79wqtIB4669MMP0umw4Xn95uIN7KPNg==
  • sophos-domain-verification=4615211644ca91a65ad6bd95122f95fa23eb3244ed24f72c53667a4c0a3a2f54
Cloud / SaaS Services Detected
Cisco Duo Sophos