Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

GFZ Helmholtz Centre for Geosciences

gfz.de

Group Fog
Discovered 2025-02-04 21:12 UTC
Est. attack date 2025-02-01
Country DE
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Description:

Extract from Gitlabs: PT. ITPRENEUR INDONESIA TECHNOLOGY, GFZ Helmholtz Centre for Geosciences, LUA Coffee

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • b1791.mx.srv.dfn.de.
  • c1791.mx.srv.dfn.de.
  • a1791.mx.srv.dfn.de.
TXT Records
  • HARICA-daixckcDu6hTgkCM3hk
  • HARICA-Atmb6pR6Dtv9DZMiMY7
  • google-site-verification=PBmbfc0roQUVqC9JRR5CG3I8Dde-BsCDpxsdcOSSVi4
  • apple-domain-verification=x4FbNnccJGQzMTnS
  • brevo-code:6fad695b8997745705f7bded854ca36f
  • google-site-verification=5DbFz1OqPjnkQBkd3L4S0nfb9_uVY9PyhjzaA1tVqls
  • openai-domain-verification=dv-9tE5pBQ3FyUnoOmhgRwTtFq2
  • google-site-verification=xZys4ru3dIHJgPjigJsVn4lxGuWDLkVhMt8pI5-UhcE
  • v=spf1 a:mail.gfz.de a:otc-de-spf.mms.t-systems-service.com a:gfz-potsdam.managed-otrs.com ~all
  • ZOOM_verify_WMcZHMblRpm62qSZoQBMGt
  • anthropic-domain-verification-ch9pe6=C8I1GLXPfEOCBEOHXlJpRwe5O
Cloud / SaaS Services Detected
Anthropic Apple Brevo OpenIA Zoom

Leak Screenshot:

Leak Screenshot