Contact us Buy Me a Coffee

Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Logo

TEAM GROUP

teamgroup.co.th
Group Medusa
Discovered 2025-09-03 04:22 UTC
Est. attack date 2025-09-01
Country TH

Description:

TEAM GROUP is one of the leading integrated consulting firms in Thailand and region with more than 40 years of experience in comprehensive consulting services in the areas of Building and Infrastructure, Water Resources, Environmental Management, Transport and Logistics, as well as Power and Energy. TEAM GROUP has accomplished more than 2,500 projects in Thailand and overseas including the Xayaburi Hydroelectric Power Project, Suvarnabhumi Airport, Government Complex, and MRT Blue Line Extension. company is headquartered in TEAM Building, 151 Nuan Chan Road, Nuan Chan, Bueng Kum, Bangkok 10230 Thailand 1028 Employees. The total amount of data leakage is 2.25 TB

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • staffthnic.co.th
MX Records
  • alt2.aspmx.l.google.com. Google Workspace
  • alt1.aspmx.l.google.com. Google Workspace
  • aspmx.l.google.com. Google Workspace
  • alt3.aspmx.l.google.com. Google Workspace
  • alt4.aspmx.l.google.com. Google Workspace
TXT Records
  • google-site-verification=2kNKmIGNiTAJwH_dopE_avMXXFeqtCdWTwI1chW_8TQ
  • hgjrrfxszv00h32nbn69f702fyfy7qwr
  • teamgroup.azurewebsites.net
  • czn95lv1yc5nk18nsnn99l0fqxswlwn6
  • _globalsign-domain-verification=Gr1jT6YxGjVaW-b8_fHmwj1A4sWZgeJPtj7IJtM4WU
Cloud / SaaS Services Detected
Global Sign

Leak Screenshot:

Leak Screenshot

Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data. This platform indexes only publicly visible information posted by ransomware operators and open web sources without accessing or obtaining the underlying stolen content. The service is provided to support public awareness, legitimate research, and cyber-resilience. No stolen personal or confidential data is collected or distributed via this site.