Chroma Color
Chroma Color
Group: play
Discovered by ransomware.live: 2024-06-12
Estimated attack date: 2024-05-17
Country:
Description:
United States
🕵️ Infostealer activity detected by HudsonRock
Compromised Employees: 0
Compromised Users: 2
Third Party Employee Credentials: 14
External Attack Surface: 0
DNS Records:
The following DNS records were found for the victim's domain.
WHOIS Emails
- abuse godaddy.com
MX Records
- usa.mx3.mailanyone.net.
- usa.mx4.mx25.net.
- usa.mx1.mailanyone.net.
- usa.mx2.mx25.net.
TXT Records
- v=spf1 mx a include:spf.mailanyone.net include:spf.protection.outlook.com ip4:162.254.80.0/22 ip4:50.203.210.94 -all
- 1cq04495oi4dbtqcjr6hi8358o
- 1o8dd4kn2elp57c3fbq0ogousg
- 693d22fg6ytv2r2h2p7054sn5tfqngrl
- 82rq3afi5tupjbe0ce6mqmn1kd
- 9c9tdsmeipbt4mv5lvjhu9981v
- 9hqd0cfp2ht3glm311a77uogoa
- MS=ms45872575
- d08g9bmvtu652r48gpbcgl5a5o
- duo_sso_verification=wkNuEVtwVhpgLM2qTRyUnKgZlWx5LoDjRify01nSSGMgwHSd8Jv3G6ekddjZ5h2E
- g6s01bbjnj5682jk2h14osc3km
- google-site-verification=RyhOMAbH8aYP1Cpro6OBYJJkuvKq000Y-n3nozGreJU
- k1sdiif1sskteg9qa8h14rstnm
- l369gpf1v16sokquc8ng7motd8
Cloud / SaaS Services Detected
Microsoft 365
Cisco Duo
Leak Screenshot:
