Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo Cinvestav

Group: Coinbasecartel

Discovered by ransomware.live: 2025-11-13

Estimated attack date: 2025-11-13

Country: MX

Description:

The Centro de Investigación y de Estudios Avanzados del Instituto Politécnico Nacional is a public Mexican institution focused on the development...


🕵️ Infostealer activity detected by HudsonRock

Compromised Employees: 248

Compromised Users: 196

Third Party Employee Credentials: 148


External Attack Surface: 173


Infostealer Distribution


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • ayuda nic.mx
  • abuse nic.mx
MX Records
  • cinvestav-mx.mail.protection.outlook.com.
TXT Records
  • google-site-verification=2RnsY0SUWRbqxZIurs9P31CR0SLswNmOwm63bLZ4-rg
  • fh+JTjljyKTuyxyqDFYoI7bIK7/NzCo7mQFC3RbNcVJl16goXUWjg9/pw3/CRKVTxHiTRLKzNIIg0H+g3zaBiA==
  • v=spf1 ip4:148.247.67.37 ip4:148.247.67.52 a mx a:mail.ecorreo.cinvestav.mx include:spf.protection.outlook.com -all
  • JIk/2d2mURsQ48MXDZLVBN8tiBP/1Z0UkYUWzWzUtyrwtJVEFbL94lR7dC59+LCyHNaBZUFBeQ5d4xOoMdmKFQ==
Cloud / SaaS Services Detected
No well-known cloud or SaaS service detected.

Leak Screenshot:

Leak Screenshot