Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Discovered 2026-11-04 22:26 UTC
Est. attack date 2026-11-04
Country CO
Sector
Not Found

Description:

Organization with 339 emails extracted. Domain: dian.gov.co

Infostealer activity detected by HudsonRock

Compromised Employees: 440

Compromised Users: 117561

Third Party Employee Credentials: 368


External Attack Surface: 128


Infostealer Distribution

Exposure Report
by ParanoidLab
1268235
Passwords
2127 critical
5417
Cookies
909 critical
Last queried 2026-11-04 22:26 UTC

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuseregistrocolombia.co
MX Records
  • dian.in.tmes.trendmicro.com.
TXT Records
  • tmes=4c5055042b563d71f5d01afbf4caea98
  • _ocpwpik48syk7pxqgf4vvynir2iq7fw
  • 5hfxq08s4t6jxf3lk4g24xpbjsjm85mk
  • 7n1mn2mio3k2apbrf5ph4ta8bk
  • _mnsomoilr2e0gy9e9g2oh485t6awesq
  • oaRN58tPigsOtURF22W3m6eBge2klyA0niT/gK6A/aM=
  • lrnma7101snqc6gor7e4glrpqr
  • xx8clxqcvkjqr1ckc59rz9phbg7x13yh
  • globalsign-domain-verification=6qhdvzBJaRtIDw9KLDn7Qh0o3TQdp-vyov94kPcF93
  • MS=ms35143586
  • heyhack-verification=38c442e2-ca26-4fa1-905c-d4873f4035f7
  • grreghdil0jgvm69gleq1g3sil
  • p4oohf7o1og2iktkb48jhgkhcm
  • _3s8xpgg20d70h08xvsiqemx5m0y50h9
  • _gjr4x7frt2pm5r82pikcqs9mo9wiatt
  • 3c845b9ea5ec4d04b6a1f31ff1157ea3
  • globalsign-domain-verification=51tRi-nXOrE53uyIBPQ40k_1oPHvUCv1hWli3iovU8
  • /wNIcbN/88CLwv5yRhsdyeB9xj5gamW9T7mXDQlJkHw=
  • amazonses:z62Z5vKUMTiiFUYHDUh+c1m2n2rBtztJ8PWBSeYvF4k=
  • JAN6IwyNmVk2UBueOQ3cc3QipqOIH2PWP383TB8vxors1UHE+P00pNwxEK7VznK4EMxUMD3l342t4HxkAgh+2w==
  • vg44khh3cv5jsv1tzq25t7fqf91pg0zj
  • 501vmqn6tqmo8lu7c0dfho4n4a
  • v=spf1 mx ip4:190.83.78.146 ip4:190.83.78.159 ip4:190.83.78.8 ip4:190.83.79.51 a:mail.sealmail.co include:spf.protection.outlook.com include:spf.tmes.trendmicro.com include:spf.rpost.net include:spf1.masivapp.com include:_spf.us.sendclean.net -all
  • amazonses:ByqOhITWG8OWZ3idC6bKaCYc6xqph2x6ByRaJM/tL5c=
Cloud / SaaS Services Detected
Amazon SES/WorkMail Microsoft 365 TrendMicro

Leak Screenshot:

Leak Screenshot

Other recent victims