CADENCEBANK.COM
CADENCEBANK.COM
Group: clop
Discovered by ransomware.live: 2023-07-06
Estimated attack date: 2023-07-06
Description:
Cadence Bank - Home
🕵️ Infostealer activity detected by HudsonRock
Compromised Employees: 1
Compromised Users: 116
Third Party Employee Credentials: 0
External Attack Surface: 38
DNS Records:
The following DNS records were found for the victim's domain.
WHOIS Emails
- domain.operations web.com
MX Records
- us-smtp-inbound-2.mimecast.com.
- us-smtp-inbound-1.mimecast.com.
TXT Records
- cisco-ci-domain-verification=75081d5b942fe0fe364f99f558df2d6dfd9f88bdce97bf48fb7fc47b4e81d9cb
- docusign=10026177-e933-4f18-8e6e-f92bb3520f0d
- adobe-idp-site-verification=9a07e06806b94c05ef05ac4218ae153b89f297615f7c843079633474692c51d6
- wtln5f35x4xq2lw1353fc814dgb5wz64
- zoom-verification=13851913
- atlassian-domain-verification=1CsPSr5Ghi/jidxOHD/vsnZaIJAE2I5DCwYRjUd6SQdgukPBl8diuRTvb1lOhXIb
- docusign=224170ff-49b0-4a23-89d9-446f68bf4039
- v=spf1 include:spf1.cadencebank.com include:spf2.cadencebank.com include:spf3.cadencebank.com include:spf4.cadencebank.com include:spf5.cadencebank.com include:spf1.broadridge.com include:spf2.broadridge.com include:_spf.salesforce.com include:us._netblo" "cks.mimecast.com -all
- Dynatrace-site-verification=9647da4b-dba9-4a0a-83f9-16a744f65b05__f17ug41rtk74vu82n67n4j19ka
- 0ed1fe018af3f4e29f54d24a34ba7dafab67432384
- wrike-verification=NjIyODg4OTpmN2VhZDg3ZmNjMmFhZTFjM2I5ZTFhYWE2NmU1MTE3Yjc2OTA3ZjRiNzZiMWUxMmQwYzNmOTI3NDg2ZDJkMTEz
- apple-domain-verification=OQnZonk8Aqcjfo8giRDYGePRrKSbYIfdviZd5oABetg
- atlassian-domain-verification=07aHukZ4ViIlBI5T1Lgzx/wtzXaL5NAqVKhzt8kaSV6EjVTnWreao2Hhcm6OEM7G
- facebook-domain-verification=gc2dspdy087x7q069inltn1wcge5dn
- zywave-domain-verification=gPhK778C1GApUJ/NjDhCmq0AukdqerQ3mCjxVf4MX5A=
- google-site-verification=HOXwUs8Xclr_bA7mR1MMwFRBFBd1-_E9tvdsVYRrog0
- amazonses:lkVXnDgajoIlo/3wM1lPai0Spb+sanqWltpt/155MAs=
- google-site-verification=it5xswpIpf9V8hJ73S4_Ey6uAwPA3aogZJ6b-FtceXs
- pardot275642=a342212b9a6c266c51f190d42caf32a22af70e4a1825025480830de6a1d662bb
- chn0mxpyby46xbkm613q83lx4ww1nwbp
- _5e7lvvwwuhxl0noyfuadm7cyvspz3hz
- google-site-verification=wa-ee82cFwYpQAXMsM893bnVVBqBsYdW2vxa6HQZ_pQ
- onetrust-domain-verification=6bd5d3252855433ba4f93cd3db9aa807
Cloud / SaaS Services Detected
Adobe
Apple
Atlassian
Amazon SES/WorkMail
Salesforce
Cisco
OneTrust
Mimecast
DocuSign
Leak Screenshot:
