Thermo King
thermoking.ca
Group
Dark Project
New Group
Discovered
2026-08-05 13:12 UTC
Est. attack date
2026-06-08
Country
Sector
Agriculture and Food Production
Education
Energy & Utilities
Financial Services
Government & Defense
Healthcare
Hospitality
Manufacturing
Other
Professional Services
Retail & E-Commerce
Technology
Transportation
This is an emerging group, so this claim should be treated with caution until independently verified.
Description:
Due to cyberattack on Genesis more than 70 Gb of company data was stolen. Leakage contains big amount of sensitive data such as company's customers data, bank and financial information documents. About 10 000 files are not secured by THERMO KING for now. Download here: http://[REDACTED].onion
DNS Records:
The following DNS records were found for the victim's domain.
WHOIS Emails
- adminjonjo.com
- registryrelationsrebel.com
MX Records
- thermoking-ca.mail.protection.outlook.com. Microsoft 365
TXT Records
- v=spf1 ip4:69.58.102.243 ip4:66.70.255.209 include:spf.zoho.com include:transmail.net include:spf.protection.outlook.com include:_spf.salesforce.com ~all
- MS=ms32813532
- knowbe4-site-verification=5a756ceaf7de170738916a2c69d6bff6
- uesgrovk18n7run0elt8445tqh
- 00Dau00000AHofO=1TBOH00000004YH
- 00DAq00000EU7gl=1TBAq0000000CPN
- infor-cloudsuite-domain-verification=66L8VC7Z7VCZCPJ9FKMHN4RKNZTPE2ZRBZPEQZUSK4Q8DTV9UZDCZWEY9ARC6J2K
- sj08et3g7lhdpjnhuiggnu7st9
Cloud / SaaS Services Detected
KnowBe4
Microsoft 365
Salesforce
Zoho Campaigns
Leak Screenshot:
Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data. This platform indexes only publicly visible information posted by ransomware operators and open web sources without accessing or obtaining the underlying stolen content. The service is provided to support public awareness, legitimate research, and cyber-resilience. No stolen personal or confidential data is collected or distributed via this site.