Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo Academy of Model Aeronautics

Group: Blacksuit

Discovered by ransomware.live: 2024-08-27

Estimated attack date: 2024-08-27

Country: US

Description:

Founded in 1936, the Academy of Model Aeronautics (AMA)


🕵️ Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 164

Third Party Employee Credentials: 0


External Attack Surface: 27



DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuse godaddy.com
MX Records
  • modelaircraft-org.mail.protection.outlook.com.
TXT Records
  • facebook-domain-verification=ew05t2t7qeg6hp2u1i5n8xm7dhfddr
  • google-site-verification=FXtDaFzFPqgmwIGXWeKxJwO8BvZLYP7eaZ9su__JeII
  • amazonses:EfPjvcKSOKhFlPhMVMTaK2r9/h7iWOXO9uOmNSU+ouM=
  • MS=ms97596902
  • MS=ms26569307
  • v=spf1 a mx ip4:64.211.220.158 ip4:192.31.130.43 ip4:192.31.130.41 ip4:192.31.129.80 ip4:12.157.186.141 ip4:3.139.25.162 ip4:3.141.247.72 include:spf.protection.outlook.com a:smtp.modelaircraft.org a:www.modelaircraft.org a:shop.modelaircraft.org -all
  • google-site-verification=spdPoKxO4l_4g6FJXVKR4urK2ycRSOd3UHV-UwxNNQ4
Cloud / SaaS Services Detected
Amazon SES/WorkMail Microsoft 365

Leak Screenshot:

Leak Screenshot