Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

DFI AMERICA, LLC

www.dfi.com

Group Titan
Discovered 2026-05-18 17:58 UTC
Est. attack date 2026-05-11
Country US

Description:

[AI generated] DFI AMERICA, LLC is a U.S.-based company operating in the financial services and investment industry. It functions as an American subsidiary or affiliate of a broader financial group, providing investment advisory, asset management, and related financial services. The company operates within the United States and serves institutional and corporate clients, supporting capital markets and financial consulting activities in North America.

Infostealer activity detected by HudsonRock

Compromised Employees: 6

Compromised Users: 3

Third Party Employee Credentials: 6


External Attack Surface: 9


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain.operationsweb.com
MX Records
  • dfi-com.mail.protection.outlook.com. Microsoft 365
TXT Records
  • trend-micro-v1-domain-verification.281bf5e1546d4a2df164bae8c9ff348f=f7621b72-64c2-4ae5-a4c3-a533b1b825cd
  • MS=ms67267119
  • ZZgMD4qmrfXiqlk9tls3NT6dRcKJYIdwLkkEsfeQTlGP6d6r8WtxD65OzuhIe96zaMSfmPa4SArV/skwqQjh6A==
  • mlgce3i1rm0us2065djsegbpde
  • ZA=Hral3a9oJfynsH1Cy+cSSQ==
  • v=spf1 ip4:211.21.163.83 ip4:211.21.163.66 include:spf.protection.outlook.com include:8330016.spf10.hubspotemail.net -all
  • ef+FHB4Allw6sVWJhM0n3aWKdCNGs8TcciP1WdVM9hCWyJJ8jl2aUTf01zAWfwPGJUdcaAq1aTzXadPwm6cUSA==
Cloud / SaaS Services Detected
HubSpot Microsoft 365

Leak Screenshot:

Leak Screenshot