Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo Condere Ip, Infracom Group

Group: play

Discovered by ransomware.live: 2024-09-29

Estimated attack date: 2024-09-24

Country: SE

Description:

Sweden


🕵️ Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 3

Third Party Employee Credentials: 1


External Attack Surface: 3



DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • infracom-se.mail.protection.outlook.com.
TXT Records
  • MS=ms95203175
  • bce2b65898ee0f9e84ac313cfc1ebc08
  • have-i-been-pwned-verification=dweb_qga52tjq259rmkcfp1ei8k8a
  • 4bcdwjtrykdr57jzq6d0wdz8przk46j5
  • v=spf1 include:spf.protection.outlook.com include:spf.infracom.se include:_weblink._spf.pin.se include:autotask.net ip4:81.93.128.0/19 ip4:83.218.64.0/19 ip4:217.70.176.0/21 ip6:2001:4b98:c::/48 ~all
  • duo_sso_verification=ky8h8bNmA5AbtCMZG71LhpKUDtS5n0ro7B3o35WFP0nijN8yEg0h3rZuYysR1ett
  • upsales-customer-domain-verification=b9fd95d8d4dbc9ed94a9634696194502
  • google-site-verification=BIOj5822UNm5VrWEHVrXMfDK3vBxOM1nNUkJI0iKUuc
  • apple-domain-verification=dxuriUCE1xGPh7qP
Cloud / SaaS Services Detected
Apple Microsoft 365 Cisco Duo Have I Been Pwned

Leak Screenshot:

Leak Screenshot