Buy Me a Coffee

Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo City of Lowell

Group: play

Discovered by ransomware.live: 2023-05-03

Estimated attack date: 2023-05-03

Country: US

Description:

Lowell, Massachusetts, United States


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • mishelp lowellma.gov
MX Records
  • d11456b.ess.barracudanetworks.com.
  • d11456a.ess.barracudanetworks.com.
TXT Records
  • v=spf1 mx a ip4:144.121.5.154 ip4:144.121.5.162 ip4:144.121.5.176 ip4:144.121.20.48 ip4:144.121.20.11 ip4:96.81.110.2 ip4:144.121.5.190 include:spf.protection.outlook.com include:spf.ess.barracudanetworks.com -all
  • MS=ms92877509
  • MS=ms17158721
  • duo_sso_verification=xvSbTafewT2N3cC5rkARrSj9Gey5M3fGKQE7aBzaTHdj9P645V8eh2ql7bEi0Z3D
Cloud / SaaS Services Detected
Microsoft 365 Cisco Duo

Leak Screenshot:

Leak Screenshot