Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks


Group 8base
Discovered 2023-08-15 04:09 UTC
Est. attack date 2023-08-15
Country GB

Description:

At ANS, we believe that all organisations have the right to access the best technology, whether SMB, enterprise, public sector or channel. As a business, we have been working with apprentices for over the past 10 years, giving us the experience to offer a full end-to-end experience. In that 10-year period, we've seen 215 apprentices successfully graduate from ANS Group, and in the last 5 years, we have become an Independent Training Provider. We know how to recruit the right team of apprentices and have years of experience supporting them both on and off the job. We know how important it is to have the right program designed for your employee's apprenticeship, which is why we provide wrap-around support for both the apprentice and employer, facilitating a fully collaborative approach to apprenticeship traininghttps://www.ans.co.uk/

Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 31

Third Party Employee Credentials: 3


External Attack Surface: 9


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • eu-smtp-inbound-2.mimecast.com. Mimecast
  • ms25203720.msv1.invalid.
  • eu-smtp-inbound-1.mimecast.com. Mimecast
TXT Records
  • google-site-verification=3-eE1K2SLRdbHZe7SwVNDQXXXI2UY5jFyNTuppTX48c
  • atlassian-domain-verification=46rtbqCtB3S/ac2OyE5VIhBDz6FD4qVUmGvpjD63Clvozqda7U9Xooo40T1ewDBB
  • google-gws-recovery-domain-verification=64380491
  • ca3-7edc7dab3a63464f9f9a34f734036d7f
  • pardot909202=249f1ce447b219abaeb60e5b5ef9da6cc4b041b97ad2202464c6ffd5dadbcf97
  • MS=ms67956530
  • ca3-32b50dea671740a3a5f9c9101b649d3a
  • ZOOM_verify_xjj4c482HVOQKOEUMK2RmV
  • google-site-verification=RQk0dBqKZ8PP908y1wRtu2L1me3UUwbtkQ6eAJnFV0k
  • 59t2n7zv8754jsc142btndk4s0jrqg42
  • v=spf1 include:eu._netblocks.mimecast.com include:spf.protection.outlook.com include:spf.archway.ans.co.uk include:mktomail.com include:amazonses.com ip4:153.92.242.237 ip4:168.245.93.86 -all
  • MS=ms2520372
  • access-domain-verification=4b8b09bda398759f1c9d191e33972cab9f6e8d416ae63253674c4dcc063686a6
  • apple-domain-verification=vvQFlkUtLQPtY7AQ
  • MS=ms25203720
  • google-site-verification=5SxkIVR0vVvE-f1FMq7QcvTvfOSsgwAgfobG4sQOxuA
  • docker-verification=22045efe-d827-4b7a-a07e-4221608dbf20
  • access-domain-verification=eafec76e7870dc4689c0ca3b23899af6d74d1a3aecbf08199f84402e73d61de7
Cloud / SaaS Services Detected
Amazon SES/WorkMail Apple Atlassian Docker Marketo Microsoft 365 Mimecast Salesforce Zoom

Leak Screenshot:

Leak Screenshot