Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Berkadia Commercial Mortgage, LLC. (berkadia.com)

berkadia.com

Discovered 2026-03-24
Est. attack date 2026-03-24
Country US

Description:

Salesforce records containing PII and other internal corporate data have been compromised. The company failed to reach an agreement with us despite all the chances and offers we made. They don't care. | Size: 27GB (compressed) | Updated: 25 Mar 2026 | SHA256: 2ae1c2804c01f5894143620518ec41fceb98e330f408c7f38e3d6ef93ebe8f21

Infostealer activity detected by HudsonRock

Compromised Employees: 8

Compromised Users: 20

Third Party Employee Credentials: 15


External Attack Surface: 41


Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domainabuse@cscglobal.com
MX Records
  • berkadia-com.mail.protection.outlook.com.
  • berkadia-com.mx1.arsmtp.com.
  • berkadia-com.mx2.arsmtp.com.
TXT Records
  • google-site-verification=SDTK8miSkca03deoZgFqIOdzSK2STvRMShu-x1FKk0U
  • onetrust-domain-verification=1afc187844b9428a8cd419bdb3de8b8d
  • BAsgzg3S6sBwBAjoo4pP2+hS5z2FigX5pGHU4tmcR+7YeaCvHVCTWKjabxXzX6j4/buo7pnHZyCGjJ8PD+qzqQ==
  • docker-verification=ca678268-9f35-44da-bb3f-fa13f853641a
  • 5055183af5c810881a636a5cbb389e444ef9c6d3d5f9ab326100111eb71ba832
  • LBtK4Zi3UPPBJFirSQtIQg==
  • MS=ms22962883
  • SFMC-w8emNTo2HQm-75VNuyI41kWr0ZrgmksOKapkprG3
  • dropbox-domain-verification=ib4lqnw1olus
  • 24286D4EC1
  • sending_domain834072=ba76c8168e95b0dfa242dfd15c277a69256530b17ad31513f34b681be472ab0d
  • zoho-verification=zb66241692.zmverify.zoho.in
  • v=spf1 redirect=berkadia.com.on.autospf.email
  • pardot_278912_*=d107058fcfa2e3e925144c4cc2c57290154e321276c06e95f6ea10eea5b17f5c
  • QP2ksImYFCE5OQGfTz4mal/rZjXyWZAUswI4IXTEpwZRqC1jC2CjfQHQ7MR4RzWgHfFAO21A9jR/KtbrJ9UMkg==
  • box-domain-verification=555684f6350412b799f65762f8893345c2bfd71dd2db887d2e36f90ef035bb06
  • jamf-site-verification=gYy7Q27MCkBwU_ktzxu2dg
  • apple-domain-verification=B2KR4PjkYMp7lIU2
  • tyYJeg7gJK7YJZZAIeW0245pJFh/6ciZy4Y78ROgn0rqMU3TtqH/bF3UkD8PiuNYBAUzdaWnSOu3xwuOkqRQyw==
  • docusign=4a235bc5-9df7-49af-ae73-542315bc8a39
  • canva-site-verification=XDyGrNGJ3bz8U6bRUxnm7g
  • cursor-domain-verification-xph4rv=7vT72JOXFTDrEDYDQSAFzUy6F
Cloud / SaaS Services Detected
Apple Dropbox Microsoft 365 Box JamF Zoho Campaigns OneTrust DocuSign