Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

GCC of America, inc.

gcc.com

Group Anubis
Discovered 2025-09-02 14:12 UTC
Est. attack date 2025-09-02
Country US

Description:

Data breach at one of the largest cement and concrete producers in North America.

Infostealer activity detected by HudsonRock

Compromised Employees: 2

Compromised Users: 29

Third Party Employee Credentials: 105


External Attack Surface: 13


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain.operationsweb.com
MX Records
  • mx2.hc4625-78.iphmx.com. Cisco/IronPort
  • dh4611-esa1.iphmx.com. Cisco/IronPort
  • esa.hc4625-78.iphmx.com. Cisco/IronPort
  • inbound-smtp.us-west-2.amazonaws.com. Amazon SES
  • mx1.hc4625-78.iphmx.com. Cisco/IronPort
TXT Records
  • ciscocidomainverification=4282a08a00aca2bc70000be1bb096661a89de2106bce04bac6b9b93251814e88
  • docusign=d5600f33-c8e6-4dc7-80d4-4fbd333bf12c
  • 4lho4vqvak2dgq57u1419imfr0
  • mandrill_verify.r1HAlLDHxO_LRR_gz8IT2g
  • duo_sso_verification=DG0h44VhmeF44iqWJHFA671c4g3H9es466e0oKMg0PTYBdq0TEtOrl2wGc74CBEP
  • apple-domain-verification=64tD2hlbAD2ZUOQH
  • v=spf1 ip4:201.174.24.13 ip4:208.82.107.205 ip4:207.54.92.232 ip4:139.138.35.169 ip4:216.71.141.193 ip4:139.138.57.194 ip4:207.54.93.151 ip4:139.138.47.169 ip4:207.178.209.241 ip4:208.82.107.200 ip4:208.82.107.202 ip4:20.1.130.13 ip4:20.1.128.197 ip4:20.9" "6.12.43 ip4:201.174.24.14 ip4:201.174.24.113 ip4:201.174.24.114 ip4:201.174.24.115 ip4:201.174.24.116 ip4:201.174.24.117 ip4:201.174.24.118 ip4:201.174.124.119 ip4:201.174.24.51 ip4:23.21.109.197 ip4:23.21.109.212 ip4:147.160.167.0/26 include:spf.protecti" "on.outlook.com include:_spf.psm.knowbe4.com a:mail.gcc.com a:mail2.gcc.com a:mailgccabq.gcc.com a:dayforcehcm.com -all
  • knowbe4-site-verification=d20daf4db03d5cd0c892be958983baaa
Cloud / SaaS Services Detected
Apple Mailchimp KnowBe4 Cisco Duo DocuSign

Leak Screenshot:

Leak Screenshot