[0xCAFE]

Hello DarkForums!
it's my first posting. good to see you all))

recently I've got access for a Vietnamese Local Government mail server, and then leaked 772GiB of data and encrypted their whole system.
but it seems they don't want to pay me the ransom, so I'm leaking this for sample.
I'll sale the entire data which includes mail dumps with soon. If you are interested, stay tuned!

Breach info

    Breached by: Darkforums user 0xCAFE (me!)
    Breached date: about feb 2025 -
    Organisation name: Binh Duong province local government, Vietnam
    Size: total 111.8MiB (*it's partial data)

What is this?

    1. "SSL-Geotrust"
        folder contains certifications things.
    2. "names.nsf"
        it is raw database binary file that contains user credentials, account identities, user information and more.
        .nsf is exclusive format for IBM Lotus/HCL Domino, so you need a Domino licence or something to read them.
    3. "mail.tinhuybinhduong.vn.names.nsf.csv"
        it is dump of names.nsf through the web interface. it is useful but not contains all of the names.nsf contents, just partial.
        it contains:
            usernames, mail addresses, real names, hashed passwords, physical locations, client information, and more
            total 948 rows.

Directory Structure

Show Content

Spoiler
    [4.0K]  ./
    ├── [4.0K]  SSL-Geotrust/
    │   ├── [4.0K]  04-4-2021/
    │   │   ├── [2.2K]  certificate.cer
    │   │   ├── [1.1K]  certreq.txt
    │   │   ├── [1.6K]  intermediate.cer
    │   │   ├── [ 32K]  keyring2020.kyr
    │   │   ├── [ 129]  keyring2020.sth
    │   │   ├── [ 33K]  keyring2021.kyr
    │   │   ├── [ 129]  keyring2021.sth
    │   │   ├── [1.3K]  root.cer
    │   │   └── [5.5K]  server.txt
    │   ├── [4.0K]  05-4-2022/
    │   │   ├── [4.0K]  mail.tinhuybinhduong.vn/
    │   │   │   ├── [2.4K]  certificate.cer
    │   │   │   └── [1.6K]  intermediate.cer
    │   │   ├── [1.1K]  certreq.txt
    │   │   ├── [ 30K]  keyring2022.kyr
    │   │   └── [ 129]  keyring2022.sth
    │   ├── [4.0K]  06-5-2022/
    │   │   ├── [2.7K]  certificate.crt
    │   │   ├── [1.6K]  intermediate.cer
    │   │   ├── [2.0K]  key.pem
    │   │   ├── [ 33K]  keyring2022.kyr
    │   │   ├── [ 129]  keyring2022.sth
    │   │   ├── [1.6K]  private.key
    │   │   ├── [5.6K]  server.txt
    │   │   └── [3.5K]  tinhuybinhduong_geotrust_5-5-2022.pfx
    │   ├── [4.0K]  10-7-2024/
    │   │   ├── [ 33K]  keyring2024.kyr
    │   │   ├── [ 129]  keyring2024.sth
    │   │   └── [5.6K]  server.txt
    │   ├── [4.0K]  21-7-2022/
    │   │   ├── [1.6K]  cabundle.crt
    │   │   ├── [2.3K]  certificate.crt
    │   │   ├── [ 225]  CMD.txt
    │   │   ├── [2.0K]  key.pem
    │   │   ├── [ 33K]  keyring2022.kyr
    │   │   ├── [ 129]  keyring2022.sth
    │   │   ├── [1.6K]  private.key
    │   │   └── [5.6K]  server.txt
    │   ├── [4.0K]  27-6-2023/
    │   │   ├── [ 33K]  keyring2023.kyr
    │   │   ├── [ 129]  keyring2023.sth
    │   │   └── [5.7K]  server.txt
    │   ├── [4.0K]  backup/
    │   │   ├── [ 32K]  keyring2020.kyr
    │   │   └── [ 129]  keyring2020.sth
    │   ├── [4.0K]  kyrtool/
    │   │   ├── [4.0K]  linux32/
    │   │   │   └── [ 45K]  kyrtool
    │   │   ├── [4.0K]  linux64/
    │   │   │   └── [ 52K]  kyrtool
    │   │   ├── [4.0K]  w32/
    │   │   │   └── [ 42K]  kyrtool.exe
    │   │   ├── [4.0K]  w64/
    │   │   │   └── [ 54K]  kyrtool.exe
    │   │   └── [1.6K]  readme.txt
    │   ├── [ 32K]  keyring2020.kyr
    │   ├── [ 129]  keyring2020.sth
    │   └── [ 84K]  kyrtool.zip
    ├── [317K]  mail.tinhuybinhduong.vn.names.nsf.csv
    └── [112M]  names.nsf

Sample:
 

Code:

DisplayName,DisplayMailAddress,dspFirstName,FirstName,dspFullName,ShortName,HTTPPassword,ClientType,Owner,ClntDate,CompanyName,Location,MailSystem,MailDomain,MailServer,MailFile,InternetAddress,MessageStorage,EncryptIncomingMail,CertificateDisplay,UserCertificateDisplay,CheckPassword,PasswordChangeInterval,PasswordGracePeriod,HTTPPasswordChangeDate,DocumentAccess,CryptoCap,Person_Main,Person_Detail,Person_Cert,ClntMachine,ClntBld,ClntPltfrm,JobTitle,City
SuLT/TUBinhDuong/DCS/VN,SuLT@tinhuybinhduong.vn,Lâm,Lâm,SuLT/TUBinhDuong/DCS/VN; SuLT,SuLT,(G0IGOxsyDIka16e9C31H),0,SuLT/TUBinhDuong/DCS/VN,Lâm,Bac Tan uyen,Huyen uy Bac Tan uyen,1,TUBinhDuong,MAIL/TUBinhDuong/DCS/VN,mail\sult,SuLT@tinhuybinhduong.vn,1,0,1,0,0,0,0,09/09/2020 10:35:59 AM ZE7,[UserModifier],0,0,0,0,,,,,
AnPV/TUBinhDuong/DCS/VN,anpv@tinhuybinhduong.vn,Phạm,Phạm,AnPV/TUBinhDuong/DCS/VN; AnPV,AnPV,(GdL+wtoRwtTRYbIOWwtr),0,AnPV/TUBinhDuong/DCS/VN,Phạm,Bac Tan Uyen,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\anpv,anpv@tinhuybinhduong.vn,1,0,1,0,0,0,0,06/04/2019 04:15:17 PM ZE7,[UserModifier],0,0,0,0,,,,,
TrungNH/TUBinhDuong/DCS/VN,TrungNH@tinhuybinhduong.vn,Nguyễn,Nguyễn,TrungNH/TUBinhDuong/DCS/VN; TrungNH,TrungNH,(Gt1b3QZ7jJzGJsWevVxY),0,TrungNH/TUBinhDuong/DCS/VN,Nguyễn,CS Phuoc Hoa,,1,TUBinhDuong,MAIL/TUBinhDuong/DCS/VN,mail\trungnh,TrungNH@tinhuybinhduong.vn,1,0,1,0,0,0,0,11/20/2023 10:19:36 AM ZE7,[UserModifier],0,0,0,0,,,,,
QuangHQ/TUBinhDuong/DCS/VN,QuangHQ@tinhuybinhduong.vn,Huỳnh,Huỳnh,QuangHQ/TUBinhDuong/DCS/VN; QuangHQ,QuangHQ,(Gs+DRw7vtmaC4RXTo1ey),0,QuangHQ/TUBinhDuong/DCS/VN,Huỳnh,Dau Tieng,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\quanghq,QuangHQ@tinhuybinhduong.vn,1,0,1,0,0,0,0,09/29/2020 09:50:36 AM ZE7,[UserModifier],0,0,0,0,,,,,
thanhbm/TUBinhDuong/DCS/VN,thanhbm@tinhuybinhduong.vn,Bùi,Bùi,thanhbm/TUBinhDuong/DCS/VN; thanhbm,thanhbm,(GHsW5Xfg/M1AY6kiUFhA),0,thanhbm/TUBinhDuong/DCS/VN,Bùi,Ben Cat,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\thanhbm,thanhbm@tinhuybinhduong.vn,1,0,1,0,0,0,0,04/19/2018 08:20:14 AM ZE7,[UserModifier],0,0,0,0,,,,,
ldtbxh.dti/TUBinhDuong/DCS/VN,ldtbxh.dti@tinhuybinhduong.vn,,,ldtbxh.dti/TUBinhDuong/DCS/VN; ldtbxh.dti,ldtbxh.dti,(Gi2uewpDSLXOgseHRM2i),0,ldtbxh.dti/TUBinhDuong/DCS/VN,,Dau Tieng,Dau Tieng,1,TUBinhDuong,MAIL/TUBinhDuong/DCS/VN,mail\ldtbxhdti,ldtbxh.dti@tinhuybinhduong.vn,1,0,1,0,0,0,0,01/17/2024 09:31:49 AM ZE7,[UserModifier],0,0,0,0,,,,,
cbcctha.bca/TUBinhDuong/DCS/VN,cbcctha.bca@tinhuybinhduong.vn,Chi bộ,Chi bộ,cbcctha.bca/TUBinhDuong/DCS/VN; cbcctha.bca,cbcctha.bca,(GYCPhdvCe4LOHv5wwddS),0,cbcctha.bca/TUBinhDuong/DCS/VN,Chi bộ,Ben Cat,,1,TUBinhDuong,MAIL/TUBinhDuong/DCS/VN,mail\cbccthab,cbcctha.bca@tinhuybinhduong.vn,1,0,1,0,0,0,0,11/26/2018 11:09:01 AM ZE7,[UserModifier],0,0,0,0,,,,,
trungvt/TUBinhDuong/DCS/VN,trungvt@tinhuybinhduong.vn,Võ,Võ,trungvt/TUBinhDuong/DCS/VN; trungvt,trungvt,(GCdGIkLY8kwDCQnB82e2),0,trungvt/TUBinhDuong/DCS/VN,Võ,Bac Tan Uyen,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\trungvt,trungvt@tinhuybinhduong.vn,1,0,1,0,0,0,0,01/12/2018 03:33:31 PM ZE7,[UserModifier],0,0,0,0,,,,,
LuanNH/TUBinhDuong/DCS/VN,LuanNH@tinhuybinhduong.vn,Nguyễn,Nguyễn,LuanNH/TUBinhDuong/DCS/VN; LuanNH,LuanNH,(GOvklOEbWmw8TVv5T1TM),0,LuanNH/TUBinhDuong/DCS/VN,Nguyễn,Bau Bang,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\luannh,LuanNH@tinhuybinhduong.vn,1,0,1,0,0,0,0,03/16/2021 07:42:11 AM ZE7,[UserModifier],0,0,0,0,,,,,
truongtanbinh.btu/TUBinhDuong/DCS/VN,truongtanbinh.btu@tinhuybinhduong.vn,Trường,Trường,truongtanbinh.btu/TUBinhDuong/DCS/VN; truongtanbinh.btu,truongtanbinh.btu,(GqjKBJjqIq0zMAoYRQgf),0,truongtanbinh.btu/TUBinhDuong/DCS/VN,Trường,Bac Tan Uyen,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\truongtanbinh.btu,truongtanbinh.btu@tinhuybinhduong.vn,1,0,1,0,0,0,0,03/28/2017 08:05:37 AM ZE7,[UserModifier],0,0,0,0,,,,,
LMPhuc/TUBinhDuong/DCS/VN,LMPhuc@tinhuybinhduong.vn,Lê,Lê,LMPhuc/TUBinhDuong/DCS/VN; LMPhuc,LMPhuc,(GpyrhCLKKIftPEmRVKpu),0,LMPhuc/TUBinhDuong/DCS/VN,Lê,Ben Cat,,1,TUBinhDuong,MAIL/TUBinhDuong/DCS/VN,mail\lmphuc,LMPhuc@tinhuybinhduong.vn,1,0,1,0,0,0,0,03/06/2023 08:57:03 AM ZE7,[UserModifier],0,0,0,0,,,,,
nnptnt.bca/TUBinhDuong/DCS/VN,nnptnt.bca@tinhuybinhduong.vn,CB Ngân hàng,CB Ngân hàng,nnptnt.bca/TUBinhDuong/DCS/VN; nnptnt.bca,nnptnt.bca,(GIs42QOYO2DlVoqXYLfJ),0,nnptnt.bca/TUBinhDuong/DCS/VN,CB Ngân hàng,Ben Cat,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\nnptntbc,nnptnt.bca@tinhuybinhduong.vn,1,0,1,0,0,0,0,09/15/2020 03:23:55 PM ZE7,[UserModifier],0,0,0,0,,,,,
gianghtc/TUBinhDuong/DCS/VN,gianghtc@tinhuybinhduong.vn,Huỳnh,Huỳnh,gianghtc/TUBinhDuong/DCS/VN; gianghtc,gianghtc,(GrKopGoX6n3rIaB38KMz),0,gianghtc/TUBinhDuong/DCS/VN,Huỳnh,Bau Bang,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\gianghtc,gianghtc@tinhuybinhduong.vn,1,0,1,0,0,0,0,08/17/2018 07:51:17 AM ZE7,[UserModifier],0,0,0,0,,,,,
liendoanlaodong.btu/TUBinhDuong/DCS/VN,liendoanlaodong.btu@tinhuybinhduong.vn,Liên đoàn lao động,Liên đoàn lao động,liendoanlaodong.btu/TUBinhDuong/DCS/VN; liendoanlaodong.btu,liendoanlaodong.btu,(GdmeSCKQoVVfES0H4AXY),0,liendoanlaodong.btu/TUBinhDuong/DCS/VN,Liên đoàn lao động,Bac Tan Uyen,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\liendoan,liendoanlaodong.btu@tinhuybinhduong.vn,1,0,1,0,0,0,0,03/17/2020 10:59:49 AM ZE7,[UserModifier],0,0,0,0,,,,,
pyte.btu/TUBinhDuong/DCS/VN,pyte.btu@tinhuybinhduong.vn,Phòng Y tế,Phòng Y tế,pyte.btu/TUBinhDuong/DCS/VN; pyte.btu,pyte.btu,(GITBK+nfDMRL5Am5gJM4),0,pyte.btu/TUBinhDuong/DCS/VN,Phòng Y tế,Bac Tan Uyen,,1,TUBINHDUONG,MAIL/TUBinhDuong/DCS/VN,mail\pytebtu,pyte.btu@tinhuybinhduong.vn,1,0,1,0,0,0,0,05/22/2017 09:21:05 AM ZE7,[UserModifier],0,0,0,0,,,,,

Download here:

Hidden Content

You must register or login to view this content.

[UtaharaW4s4b33]

Woah, this shit bigg!!

[luftmensch]

Insane

[well]

alright, lemme sê

[BLF0ty]

see it

[aabrvb1010]

tanks,bro

[DrXFred0x]

i test this

[tnam96828]

many thanks

[tegh]

dang, blud new threat actor

[Muchogrande]

good luck