Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

CarMax, Inc.

carmax.com

Discovered 2026-01-24 00:35 UTC
Est. attack date 2025-09-29
Country US
Duplicate Entry
This victim has been identified as a duplicate of another entry in our database. However, this may not always be the case: the same organization can be targeted multiple times by the same or different ransomware groups, which may result in separate legitimate entries. Search for related entries

Description:

Size: 1.7 GB (compressed) | Records: 500k Records | Updated: 24 Jan 2026

Infostealer activity detected by HudsonRock

Compromised Employees: 32

Compromised Users: 9889

Third Party Employee Credentials: 25


External Attack Surface: 104


Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domainabusecscglobal.com
MX Records
  • mxa-001ffb01.gslb.pphosted.com. Proofpoint
  • mxb-001ffb01.gslb.pphosted.com. Proofpoint
TXT Records
  • google-site-verification=ODnTfpFbQifWBjKRX65A8Y3i7PoQdywFk168bqr1RTg
  • wiz-domain-verification=eb3455d43d74a2fdef507e6bc49f2439517640ebb9ce9d74b1b42b0ecccd9ba9
  • docusign=705e854e-8823-4d8d-a0f7-f7019f8dddcd
  • google-site-verification=vOjeIXNjXqzEkurMmPyhvVUL6vnmT5Qh5K8ZO9im3IM
  • dell-technologies-domain-verification=carmax.com_5c279dec-304a-41fe-8bf9-8e2ad84c33c0_1765404387
  • monday-com-verification=FB54gay3zdXytCqh8ysh6zd-ma8cSC3cj776c1U6b6g
  • google-site-verification=wxSKHYMUqdVw3cAaitZSl82bS4tO3z17aIwtPX-yax4
  • MS=ms12796044
  • _reqfy5vxgbh8xcqn934u14rlra6mye2
  • docker-verification=de70ed70-4827-44b1-b6d7-c38dcb855365
  • v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all
  • _698zsfqrcvmsj5yntwcrpkass3o2bzo
  • anthropic-domain-verification-27cv6m=MPuVvUotwJ4p2dgHaZfX0mLji
  • _5wze4w0s66hgzmltwq8g7y39hmxrk6q
  • _02dh0wocswntazh7jqd5a6ycbourbea
  • _9ut24ucqarr37x8fjomm1xmki00cbjw
  • facebook-domain-verification=tw14n6lv0k8grnyaa48vm2311wuf6m
  • google-site-verification=ldisBVW1HzdKm_85fn9gBW2I4qD0yqlV94Z7gA5lEbE
  • google-site-verification=3Iy5NY8DZTPkCnWUJOkiZyDD4xWlFdkkrD3fwfIQwK0
  • jamf-site-verification=GZBptmdXOB4KsqJgpJ4gfw
  • ZA=6hvA11MoOnwxb7nkfrXuRw==
  • verification_token=YirG6lsGXlh5BWKt7PuggfLeL
  • 894896C6168E5FBB2404A6FEDB71C32C47D7320AD061CA83759651B1AF77DF03
  • traction-guest=a51a1c76-2de7-453c-8968-ffd77fa453f4
  • adobe-idp-site-verification=74d49f54aa4ef058649f2c68750b90480673abb6d3d0c07ae856897fba184d1d
  • _urdnpwpauu7422hj49f1o357xgdcr2y
  • _ezfj8pl5l71vimk2bg4d7eorky28656
  • _gpidjicl8wdbf4qipf11761ykp1shze
  • ecostruxure-it-verification=f2d1a94e-17d5-46f5-9fa9-e20d20da97fd
Cloud / SaaS Services Detected
Adobe Docker Microsoft 365 Anthropic JamF DocuSign Proofpoint