Desjardin Bank / Group
Desjardin Bank / Group
Group: Coinbasecartel
Discovered by ransomware.live: 2025-10-17
Estimated attack date: 2025-10-17
Country:
Description:
They did not want to pay
🕵️ Infostealer activity detected by HudsonRock
Compromised Employees: 25
Compromised Users: 9301
Third Party Employee Credentials: 39
External Attack Surface: 113
Infostealer Distribution
DNS Records:
The following DNS records were found for the victim's domain.
WHOIS Emails
- abusecomplaints markmonitor.com
- domaines desjardins.com
- whoisrequest markmonitor.com
MX Records
- mx2.hc115-59.ca.iphmx.com.
- mx2.hc784-89.ca.iphmx.com.
- mx1.hc784-89.ca.iphmx.com.
- mx1.hc115-59.ca.iphmx.com.
TXT Records
- atlassian-domain-verification=DuYWksqGR9bn52h6ePphHr4sABCc0OGLlJVCeOAvq4CX66IzLAltPH4CHd4lTmIq
- hcp-domain-verification=5510de9b44833c08a4e432ce97960a9cd1b4c2283d55236466e56bbd6f8c3a92
- stripe-verification=a9b9e9f3fb487ab2104aad0d5e17b1e43df10a0699bf26a89ecb87770e84e400
- mindmanager-verification=9dddde7e9531b9f9375090d34d68df60e318871bea5f3129962ab4fee8d33033
- miro-verification=659c255f11475ca1228327ef7ee9f50b4713cddc
- postman-domain-verification=2c9cc9ca486f227bef1d1cc3c4eb9202a0e54f8ed9170bb378afd11d6a83b80a
- mDPVvNewpuidVeTMUE9/r0AtYu/2ZSIJjWPOIAq/YiQ=
- launchdarkly-domain-verification=c9467cd6-98ad-4924-9aac-6776a763b597
- Dynatrace-site-verification=337ae560-c13a-44fc-8678-40b6ae4f7f76__33rs0is84vgmh2566a1sv54rf3
- onetrust-domain-verification=c30f54c3ea4b4d9d96b4b944e801332c
- google-site-verification=yErtJLJatwlLP6ruI4KPe2yU6kJGqbHTI9VdOru_Stk
- Fap7FDLU=980f146df1586ae47db515a50049e7d9
- adobe-idp-site-verification=c227e5381c5e4a8773d06eab4961aa35a036209d3a8454408297ddf2c2f40491
- f39vqMOk4J-fn0ORCfQagGtH
- apple-domain-verification=YBwYQWkNAwMI47yB
- dropbox-domain-verification=7pxpzltslb0a
- google-site-verification=HC9bn6_gTfrz3cg1sBCUnPIEAYjeuxolTl7zUsb8aaQ
- adobe-idp-site-verification=f57147b92528dac5f4dfce9cbf748d6557da2bacaa24321eacf024f953a9ccea
- dITnCRb+BndR0spOPCMCFtu/baXuxtl2BiPC8mVDwmfiXgvQqp4zaVwCPIDW6oiaPSYSkCfJG5QbYTGneF5qww==
- onetrust-domain-verification=b47dc522ad54451e85c74ad40d00274c
- google-site-verification=b9bk_4g21WD5MRK9gm3zcbArl_xBpHoRX20IZkfdgKg
- Dynatrace-site-verification=372f8824-4ca0-47f0-aa5a-d980c01c4268__feekk0f8dhie9s0p4p93mkqbkf
- google-site-verification=tINRiTzweVZ7fegRatwv8_b_nWXEizP1xSeFjJFHM6U
- v=spf1 exists:%{i}.spf.hc115-59.ca.iphmx.com include:sendgrid.net include:_spf.bluematrix.com include:spf.protection.outlook.com include:_spf.desjardins.com exists:%{i}.spf.desjardins.com -all
- MS=ms11057274
- censys-domain-verification=740P7Qfr1pakBVmDTjlumpiOvSQmQXrNGbv6f_vw47-n
- docker-verification=129880c3-b253-47c8-94cd-b25f53a7d666
Cloud / SaaS Services Detected
Adobe
Apple
Atlassian
Dropbox
Microsoft 365
Stripe
Box
Miro
SendGrid
OneTrust
Leak Screenshot:
