Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks


Group Lapsus$
Discovered 2026-04-25
Est. attack date 2026-04-24
Country US

Description:

Source Code, Employee DB, API Keys, MongoDB/MySQL Creds

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • alon.bar@checkmarx.com
  • abuse@bigrock.com
MX Records
  • checkmarx-com.mail.protection.outlook.com.
TXT Records
  • docker-verification=ac5f9f08-f78a-4ed4-a177-c9cd3dd85724
  • anthropic-domain-verification-edje63=hEH9tbBjxl7z2GWvM3pYHbK1J
  • v=spf1 include:spf.protection.outlook.com include:servers.mcsv.net include:mailgun.org include:sendgrid.net include:_spf.salesforce.com include:amazonses.com include:146169.spf06.hubspotemail.net include:spf.eu.exclaimer.net -all
  • amazonses:lqyMnoA0VL0fnHiivXRrarcGODAf1cVnR/auYLHcxYY=
  • jamf-site-verification=4_5CDWmB8lj8jxhtPmRf4w
  • o1thtu8hd9dvm1m0is8o36lqg8
  • cursor-domain-verification-p6e9k2=1gH3HMtiwJqOg8YRK7faibg5G
  • atlassian-domain-verification=4zdxHKq5sOWhLhtjWKJ2nlkhEsLBlh8Ta+Gld/nehGg5sX5w5o17e+d3NR+xVv8Z
  • ciscocidomainverification=49bbffc649c8677a394104a272cb18c00eab922bf289fb1f070399de60b28c10
  • google-site-verification=wPO0Vk8rfSkmq4LI7MOgx4CnRnVZQvvhs6aXmi7dsdY
  • amazonses:EVZgC4HwLAr2w0/sMZWEFgheLrTT09dgRoJdTPGmNLI=
  • docusign=42adf495-ef93-4f2f-8cc9-fed2e8b1b55b
  • google-site-verification=QpPLhjzR2uHh-639m__JRNsHmDc67feZoQrLQmaOZLU
  • 1password-site-verification=SDL5F44IJVDQ5MIRNV4MW3SGNQ
  • k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O
  • openai-domain-verification=dv-WIIXBckL8IcrG87t3W1fNuHE
  • logmein-verification-code=eNTtN8P0v8IhwxSpOwOLJvRBm
  • google-site-verification=F5_bTdjvJ9iEInTemUyKtFuEwItdETffnQu0bxyt2ko
Cloud / SaaS Services Detected
Atlassian Amazon SES/WorkMail HubSpot Mailchimp Salesforce LogMeIn JamF Mailgun SendGrid DocuSign