Astino Berhad

This record is a provider-reported ransomware claim attributed to qilin. It is an allegation and has not been independently confirmed.

Claim context

Provider-reported sector
Manufacturing
Provider-reported country
Malaysia
Group-published claim date
First tracked
Last observed
Monitoring providers
4
Independent monitoring providers
4
Website
astino.com.my
Post URL
https://cybercrime.works/leaks/648bb5f5-7b4a-480f-a8d1-112e43802918
Data source
unified
Duplicate records merged
3

Provider observation timeline

Newest observations first. Provider observations are not independent confirmation of an incident.

  1. Monitoring provider: observed ; source-published ; retrieved .
  2. Monitoring provider: observed ; source-published ; retrieved .
  3. Monitoring provider: observed ; source-published ; retrieved .
  4. Monitoring provider: observed ; source-published ; retrieved .

Provider records

Every stored provider record behind this claim, newest first.

  1. Provider credit
    ransomware.live
    Provider URL
    https://www.ransomware.live/
    Feed id
    privtools-ransomposts
    Provider record id
    derived-sha256:e6edb774ff9e7dea0afbfcd9d569f4d55ed0c71354b802bf93fa0b4ed41a0529
    Observed
    Source-published
    Retrieved
    Format
    json-array
    Transport
    https-json
    Overlap class
    primary
    Independent corroboration
    yes
  2. Provider credit
    CTI.FYI
    Provider URL
    https://cti.fyi/
    Feed id
    cti-fyi
    Provider record id
    derived-sha256:b151e565374cc4eb5e48b084f36ebf7e6d1a5d14789b3a8e04a11baf16272800
    Observed
    Source-published
    Retrieved
    Format
    paginated-rest
    Transport
    https-rest
    Overlap class
    primary
    Independent corroboration
    yes
  3. Provider credit
    RansomLook
    Provider URL
    https://www.ransomlook.io/
    Feed id
    ransomlook
    Provider record id
    derived-sha256:8fd025a30fec81fc87a2fa537ea9b4aee36e3b13dc94a107a1340b339567ba29
    MISP event UUID
    ca1a3af9-38d0-5847-87d1-cbeee2604559
    Observed
    Source-published
    Retrieved
    Format
    json-array
    Transport
    https-rest
    Overlap class
    primary
    Independent corroboration
    yes
  4. Provider credit
    cybercrime.works
    Provider URL
    https://cybercrime.works/leaks/648bb5f5-7b4a-480f-a8d1-112e43802918
    Feed id
    cybercrime-works
    Provider record id
    648bb5f5-7b4a-480f-a8d1-112e43802918
    Observed
    Source-published
    Retrieved
    Format
    paginated-rest
    Transport
    https-rest
    Overlap class
    primary
    Independent corroboration
    yes

Tracker record history

Newest entries first. These dates describe tracker records, not attack dates.

  1. Provider update: recorded ; associated provider observation .
  2. Provider update: recorded ; associated provider observation .
  3. Initial tracker record: recorded ; associated provider observation .