Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

GENESISNET.COM

genesisnet.com

Group Clop
Discovered 2022-12-22 20:02 UTC
Est. attack date 2022-12-22

Infostealer activity detected by HudsonRock

Compromised Employees: 2

Compromised Users: 14

Third Party Employee Credentials: 5


External Attack Surface: 8


Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain.operationsweb.com
MX Records
  • genesisnet-com.mail.protection.outlook.com. Microsoft 365
TXT Records
  • v=spf1 a mx ip4:97.79.220.0/24 ip4:71.42.156.106/28 ip4:198.2.180.60 ip4:67.78.119.2 ip4:50.56.37.112 a:mail.genesisnet.com a:sahqexch041.genesisnet.com include:spf.protection.outlook.com include:spf.mandrillapp.com include:_spf.elasticemail.com -all
  • cisco-ci-domain-verification=d0a96bb6ff43d6165c890bd0b3807dc21be1cb01969bbf134f02f27fd1c582b
  • google-gws-recovery-domain-verification=64358544
Cloud / SaaS Services Detected
Cisco Mandrill

Leak Screenshot:

Leak Screenshot