Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks


Discovered 2026-07-21 09:09 UTC
Est. attack date 2026-07-21
Country KR

Description:

The Company is leading the construction IT industry with the best technology and various experiences, and striving to grow with a various customers in pursuit of technology platform change and innovation through persistent research and development in introduction of Web Services, H/W Services, BIM Services, and new technologies.-Personal information of employees and clients -Financial documents -Other files https://***.com/en/

Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 1

Third Party Employee Credentials: 6


External Attack Surface: 2


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abusewhois.co.kr
  • adminwhoisblind.com
MX Records
  • alt2.aspmx.l.google.com. Google Workspace
  • alt4.aspmx.l.google.com. Google Workspace
  • alt3.aspmx.l.google.com. Google Workspace
  • alt1.aspmx.l.google.com. Google Workspace
  • aspmx.l.google.com. Google Workspace
TXT Records
  • MS=0FBC9DA7373CEC24A11C853CD087AB8BC0DF9B18
  • v=spf1 include:_spf.google.com ~all
Cloud / SaaS Services Detected
No well-known cloud or SaaS service detected.

Leak Screenshot:

Leak Screenshot