Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

CYMA SYSTEMS

cymasys.com

Group Nova
Discovered 2025-12-25 15:24 UTC
Est. attack date 2025-12-25
Country US

Description:

CYMA Payroll and Accounting Software is designed for volume payroll processing and unique markets that process complex payroll. Through Employee Self-Service, the CYMA payroll software extends to the web allowing maximum flexibility. At its core, CYMA has been producing Accounting Software solutions since 1980 - ready to decrypt and return data + stop leak operation, reach us

Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 0

Third Party Employee Credentials: 1


External Attack Surface: 0


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abusegodaddy.com
MX Records
  • mx1-usg2.ppe-hosted.com. Proofpoint
  • mx2-usg2.ppe-hosted.com. Proofpoint
  • mx3-usg2.ppe-hosted.com. Proofpoint
TXT Records
  • selector-3434075063._domainkey Value:- v=DKIM1; k=rsa; t=s; n=core; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyqiPdhgcv+dgtoBMsGLgZy15ZzXbI1jFwqAE1CSvkbC04FSA4sWGx6PY7lbtb07gSljIC9HQzVtC0lKsxSYap+YSc5JVuXC/SrHFffvnJ8KRVblkkvyQvB7h0oQ0GaiZVr2wa1kFlCcp" "tGIUUI8+JyaNtcn/sHOx2u6d7t4bk5tCVwstjiKJcN3WthQ/RACVXvAE+JtmB6Wa/vOw7Vgj3990h8H2RSl6yQqkMhaoipH/IzlmIrqZ/jMM/TBfuZCkMcvNAJ2AMJtZ8sXLxvqMgO9sZuEWC36Q0xyO0QCEZxtm/9Y4B6JUUfDw3qqmMGNX4e3QplSSShGuWsDoHmYrQIDAQAB
  • NETORG8922433.onmicrosoft.com
  • v=spf1 include:_spf-usg2.ppe-hosted.com include:secureserver.net ~all
Cloud / SaaS Services Detected
Proofpoint Essentials

Leak Screenshot:

Leak Screenshot