Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo Coweta County School System

Group: nitrogen

Discovered by ransomware.live: 2025-05-24

Estimated attack date: 2025-05-24

Country: US

Description:

The Coweta County School System (CCSS) is the primary educational organization in Coweta County, Georgia, United States. It serves more than 23,000 students in grades pre-kindergarten through 12th grade and includes 34 educational institutions.


🕵️ Infostealer activity detected by HudsonRock

Compromised Employees: 2

Compromised Users: 3

Third Party Employee Credentials: 79


External Attack Surface: 13


Infostealer Distribution


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain.operations web.com
MX Records
  • alt1.aspmx.l.google.com.
  • alt2.aspmx.l.google.com.
  • aspmx.l.google.com.
  • alt3.aspmx.l.google.com.
  • alt4.aspmx.l.google.com.
TXT Records
  • v=spf1 a mx ip4:168.9.128.11/24 ip4:198.188.7.150 include:_spf.google.com include:aesoponline.com include:servers.mcsv.net include:_spf.mlsend.com ip4:198.73.96.0/21 ip4:209.61.151.224 ip4:207.225.137.0/24 ip4:65.124.140.0/24 ~all
  • google-site-verification=zV3ivL96HeJ1SfHakDDPkH6sqGsN1wp332JRTV83DKQ
  • apple-domain-verification=4q7kIgQ86VqalZG6
  • MS=ms30046709
  • MS=55DCF31C4F9D922502C34F08338B3E292DE2E185
  • mosyle-verification-7688120354
  • MS=ms21586142
Cloud / SaaS Services Detected
Apple Microsoft 365

Leak Screenshot:

Leak Screenshot