Alascom Falls Victim to Rhysida Ransomware

🏢 About Alascom

Alascom is an Italy-based system integrator and supplier of technical consulting services in the ICT and industrial automation sectors. With over 20 years of experience, the company specializes in telecommunications networks, IP technologies, and customized automation solutions.

⚠ Disclaimer

This report includes actual screenshots and/or text that may contain unredacted personally identifiable information (PII) obtained from publicly available sources. Information is provided solely for cybersecurity awareness and threat intelligence purposes.

📌 Overview

On August 10, 2025, the Rhysida ransomware group listed Alascom on their Tor-based auction portal. The group is offering the stolen data for 5 BTC with a 7-day auction period, claiming exclusive sale to a single buyer. Published samples include invoices, identity documents, corporate purchase orders, and financial statements.

📊 Key Details

Attribute	Information
Date	2025-08-10
Threat Actor	Rhysida
Victim Country	🇮🇹 Italy
Industry	ICT & Industrial Automation
Victim Org.	Alascom
Victim Site	alascom.it
Category	Ransomware
Severity	Medium
Network	Tor (Auction)

📥 Breach Snapshot

Field	Details
Data Types Leaked	Invoices, identity documents, financial statements, purchase orders
Estimated Records	Not disclosed
Public Statement	None
Leaked Screenshots	Multiple posted (PII visible)
Ransom Demand	5 BTC (Auction format)

📡 Domain Reputation Summary

Check	Result
Domain	alascom.it
Registrar	Aruba S.p.a.
Country	🇮🇹 Italy
Nameservers	dns.technorail.com, dns2.technorail.com, dns3.arubadns.net, dns4.arubadns.cz
Created	2002-02-21
SSL Certificate	Valid
VirusTotal Score	0/94 (clean)