Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo Gestores Administrativos Reunidos

Group: ransomhouse

Discovered by ransomware.live: 2024-06-28

Estimated attack date: 2024-05-29

Description:

Gestores Administrativos Reunidos. Outsourcing of banking and real estate services We streamline your processes through a balance between robotization and humanization.


🕵️ Infostealer activity detected by HudsonRock

Compromised Employees: 3

Compromised Users: 1

Third Party Employee Credentials: 2


External Attack Surface: 2



DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuse directnic.com
  • sistemas garsa.com
MX Records
  • garsa-com.mail.protection.outlook.com.
TXT Records
  • v=spf1 include:spf.protection.outlook.com ip4:82.223.107.12 -all
  • MS=ms26448132
  • 10v0650llfqxlsqltpp2vb5f1f228r8k
  • fkdd920ynj699gg8y2h394v5sld97f7p
  • hfgpq5ifvv8q4co9pd58natmfd
  • MS=ms90427247
  • openai-domain-verification=dv-dl0vJoqkYjaZzEJCvHj8BV0Z
  • duo_sso_verification=MzGtGce4yFwEjdGsN3O4VMFaK97EZhi2uZFSTN8SUUtd5d6sgck7aD9oWp9S4hAQ
  • MS=59822B1466706EFF0DD5B3E635054D3713EE962C
Cloud / SaaS Services Detected
Microsoft 365 Cisco Duo

Leak Screenshot:

Leak Screenshot