Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

BOMBARDIER.COM

bombardier.com

Group Clop
Discovered 2022-12-22 20:02 UTC
Est. attack date 2022-12-22

Description:

Homepage - Bombardier

Infostealer activity detected by HudsonRock

Compromised Employees: 143

Compromised Users: 895

Third Party Employee Credentials: 43


External Attack Surface: 130


Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • whoisrequestmarkmonitor.com
  • abusecomplaintsmarkmonitor.com
MX Records
  • bombardier-com.mail.protection.outlook.com. Microsoft 365
TXT Records
  • successfactors-site-verification=ZGJkZTM1MjI4OTFlOWU3NjhiOWY2ZTY1YjY5OGYwYTVmYTMxNmE0NTNkYzA3YTdlYWMyMDJjMzE3MDI3OWYwNw==
  • apple-domain-verification=AXFXnfdFjKovAVDX
  • adobe-idp-site-verification=93a327b679edad2a4fe2b81407231e9a5a1ca307924b360d9b88d73ad9da36cc
  • BcNAC719F0leHOzkSCAFCRgFJ61Oy+SjO7ICmD3FLsq2qp8d4TkdDrq+uXkYcE6vovjUZZxMXxe4+RQS78yoMQ==
  • 7bcfd235b2969135c080475e120daf6f90b698c81d1632f0c720b6abb2eee9ca
  • successfactors-site-verification=YzdhMjBkYjBjOGE5ZDhlMGNjYTgzYTM3YTI5OWY0Yjc4MzkwMTVjNTg0MzA0ODA4ZTg5YWM2ZGM0Zjk5ZGI3Ng==
  • unity-sso-verification=98cbf4b6-064d-44d8-a058-ee866de1933b
  • _globalsign-domain-verification=UPk3L5fzWJl0KXdCBykLyvAdky5u3XDZ0x1JCqKHUR
  • 28dd7c47-1232-4d46-afd6-b360662dfd4e
  • v=spf1 mx include:_spfblock.aero.bombardier.com include:_spf.salesforce.com include:servers.mcsv.net ip4:74.201.71.38 include:spf.protection.outlook.com include:_spf-dc12.successfactors.com include:_spf-dc33.sapsf.eu include:spf.ltg.email -all
  • quickbase-site-verification-f7beedbc29e83e1967cc4c9265f79a45af71faf8
  • google-site-verification=z3l1CnuZVZGL-qQ8ItmsxyxuXkMM3ytwHzpa_P8IXro
  • MS=ms34001635
  • work-accounts-domain-verification=dTo6WifAOgldeocBwpUEe2PsNlb3o7
Cloud / SaaS Services Detected
Adobe Apple Global Sign Mailchimp Microsoft 365 Salesforce SAP Success Factor

Leak Screenshot:

Leak Screenshot