ingotbrokers.com
darkvault listed this organization on its leak site on Aug 24, 2024.
- Listing date
- Aug 24, 2024
- Attack date
- Aug 24, 2024
Listing text
INGOT Brokers is a premium multi-asset brokerage firm aimed at making financial markets easily available and accessible to traders of all kinds and experience levels. The company is regulated by the Financial Services Authority Mahe, Seychelles., providing a trustworthy and outstanding trading experience. Our company was founded in 2006 with the vision to become a leader in our industry by delivering premium service, competitive prices, award-winning trading platforms and empower traders to unlock their financial freedom. INGOT Brokers offers clients top-notch trading conditions, great liquidity, and ultra-tight spreads, delivering an optimal trading experience. With 1000+ financial instruments available to trade across Forex, Commodities, Global Indices, Stocks, ETFs, and Cryptocurrencies, you’re able to build a diverse, well-balanced investment portfolio. At INGOT Brokers, you are assured of quality services that are provided with the highest standards of technical support.
About the group
darkvault posted its first listing on Apr 11, 2024 and has listed 55 organizations to date.
DarkVault is a data-exfiltration and double-extortion group first identified in late 2023, targeting medium-to-large organizations in finance, professional services, legal, and technology sectors across Europe, the UK, and North America, with a suspected connection to LockBit.
Learning center
What does this listing mean?
Ransomware groups move data out of the organization before encrypting systems and threaten to publish it if the ransom is not paid. This method is called double extortion.
The listing shows that the group claims to have targeted the organization. Whether the data was published is shown by the later status of the listing.
What should you do if your organization is listed on a leak site?
- Record the listing and any published sample files; do not visit the leak site from the corporate network.
- Isolate affected systems and preserve logs without deleting them.
- Determine which data left the organization; if personal data is involved, review notification obligations with your legal team.
- Make any decision about the ransom demand together with legal, management and incident response.
- Do not bring systems back online before the attacker’s entry point is closed.
Is your organization mentioned?
Search with your domain to check whether your organization appears in ransomware listings, leaked records, forums and Telegram channels.
Search your domainIntelligence 360
Customer intelligence on top of Infostealer Detection: leaked accounts of end users who sign in to your site.