Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks


Group Hive
Discovered 2021-12-18 16:06 UTC
Est. attack date 2021-12-18
Country NO

Infostealer activity detected by HudsonRock

Compromised Employees: 13

Compromised Users: 1

Third Party Employee Credentials: 12


External Attack Surface: 12


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • gk-no.mail.protection.outlook.com. Microsoft 365
TXT Records
  • l15MUKNRUcUpiQCq2ib6m3DSDWGrhdYg6WROnXDuYYX2ZVlKhA8fIT8N9Pk4CaYC2jXxYkzwrMy99RQSl/DfTg==
  • atlassian-domain-verification=SQuOtZVgr2Us40sjwj/JuLSddDZpq7wPbfRcEi7w5vSmS9prgosZ/S5pRh5CglBQ
  • pbt4dGZ
  • _ljvdjiwk7hj4cne94ehv5pyp89drr9a
  • 3cv2nb8u727vqp54pecjtv2tqe
  • google-site-verification=90nmUswTLVuSKj70Z3GEISaiRC9-3oNe0DNKCRvvJ0w
  • teamviewer-sso-verification=7c1b615e55e44401ab0a5b0eaa3d5db9
  • facebook-domain-verification=rql4428eix60ubb7n5nko8l55xpcjf
  • 1MA8uWiyRdj2sv1GRUqU/xinrCBnvMUlGMPdsUNSh3joy9IRhZNSTWjmUfrrnKtTvQTyiOcAr77pc4f+dnC1dQ==
  • v=spf1 include:_spf.salesforce.com ip4:62.92.122.128/26 include:spf.protection.outlook.com -all
  • atlassian-domain-verification=hpwPiG3IrAAVUNlUWZvaqDk20TgspfwIhTQairMkcsHQeBxQHB3Nrr1y9JHoIMGj
  • globalsign-domain-verification=PrNpgSxL78bNyuYJhuWCH5oRuGKLfvv-YtJyW9erst
  • apple-domain-verification=EdXkcdkNxu9VtAkf
Cloud / SaaS Services Detected
Apple Atlassian Salesforce Teamviewer