[LTGroup]

contact my email for more details if you interested in: [email protected]

-> This post is not only about data leak, but also a hacking story

1. What's Spartan Warehouse
Spartan Logistics is a third-party logistics (3PL) provider offering warehouse storage, order fulfillment, transportation, and more at our 22 locations.
Spartan Logistics is a third-party logistics (3PL) company headquartered in Columbus, OH. We specialize in a unique logistics model: We own and operate our own warehouses, fleet, forklifts, and other key equipment. We have decades of experience in fast-moving inventory, especially food and beverages, and also are veteran handlers of glass, paper, packaging materials, and more. With our staff of more than 300, we operate over 3 million square feet of warehouse space strategically placed throughout Ohio, Indiana, South Carolina, Missouri, Texas, and Arkansas. In addition, our business model allows us to control-long term costs for our 3PL customers with a heightened level of communication, quality, security, and attention to detail...

-
Domain: https://www.spartanlogistics.com/

2. What's cloud-cover
-
domain: https://cloud-cover.me/

From their website: Complete IT Support and Managed Services for Central Ohio Businesses

-
and,
Spartanwarehouse rented cloud-cover for all the IT job

3. The story
+ What's hacked
- From on-premise AD to Azure
Spartanwarehouse is an old company (establised in 1988), because of this, their IT system uses the one called "Hybrid-AD" or in plaintext: Conventional AD + Azure AD

Here is some machine on on-premise AD,


After hacked the AD, I tried login to the email, but not work


So, now I know, I will need to take out the Azure

After a while, I was able to getting into their Azure cloud



- The Online Sharepoint (or OneDrive)
After a while, I was able to browse their Online Sharepoint








- The Online Exchange
Reading email ...



- ConnectWise service
ConnectWise is a management solution by cloud-cover, it's like teamviewer, anydesk, microsoft RDP.

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Ransomware sales/discussion/recruiting | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.

[LTGroup]

-> Allow accessing to all of their workstation, server machines -> at this point, the cybersec system of cloud-cover is totally defeated, I could deploy some destructive actions, e.g. ransomeware ..., but, I choose to negotiation w/o doing any destructive acts.

In total:
- Downloaded all their company's documentations (operations, financials, ... docs)
- Accessed to all of their workstation, server machines - but, chose to negotiation w/o doing any destructive acts.

+ The negotiation
- Sending email to their managers
The emails (I sent) are forwared to cloud-cover blindly, the managers (of Spartan Warehouse) does not know about IT or Cybersec (or not their duty, they don't care)
- Cloud-cover actions:
- Disable some accounts
- Not talking back to me, despite my strategy, chose not to destroy them, but to negotiation.
- They (cloud-cover) only know the problem is very serious at the time I send email to Karolina (one of Spartanwarehouse's manager forwarded the emails (I sent) to cloud-cover)
Things could be worsen, if I decided to not inform, but to deploy some destructive actions likes ransomware your system.
- They tried to do things only afer I've completely defeated their security system.

- Filter my email from receiving on SpartanWarehouse's managers' emails - They worry of I speaking badly of them not able to protect their customer (Spartanwarehouse).


+ Result:
- I shared the SpartanWarehouse's data here

4. Conclusion
- the company does not care of their data
- the cybersec firm is useless, eating the budget, and does not care about customer data

5. Data


The data is very large & is uploading to a shared, I will update the download link when the uploading process finished.

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Ransomware sales/discussion/recruiting | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.

[alexmax]

nice story
show some sample docs bro

---

u should've ransomed them, so they will know
haha

[DredgenSun]

Aha, tidy little pic collection, nice work!

[LTGroup]

where to download？Please give download link

wil update the link when it's ready

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Ransomware sales/discussion/recruiting | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.

[Addka72424]

The link in this thread is dead. Please reply to the PM you were sent to get your thread moved back to the Databases section.