Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo Emtelco

Group: Qilin

Discovered by ransomware.live: 2023-05-05

Estimated attack date: 2022-11-09

Country: CO

Description:

EMTELCO SA is a company that operates in the Outsourcing/Offshoring industry. It employs 101-250 people and has $25M-$50M of revenue. We also have several hundred gigabytes of data. Data of all large clients (corporate), non-disclosure docume ...



DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • admin hello.co
MX Records
  • smtp.emtelco.com.co.
TXT Records
  • 2csb1kSZNUXTzwCIz9OtrivtzvCUnuGqtPQWVJvxTYameuKdA6U6yJRKcJxY8/eS2GX4IIRxenorKPAmt2rkIQ==
  • MS=ms56123395
  • doppler-site-verification=527220
  • duo_sso_verification=qZM6Z00kxeSpHSCYa1LDfaifagBJwZObE5OlZYQ2nVCVgiehltHJ9Z6qKnHoUbPI
  • google-gws-recovery-domain-verification=45693731
  • v=spf1 a mx a:emtelco.com.co ip4:200.13.225.141 ip4:200.31.192.35 ip4:200.31.192.34 ip4:190.248.54.101 ip4:201.232.123.68 ip4:200.13.237.42 ip4:200.13.237.43 ip4:200.13.237.44 ip4:200.13.237.45 ip4:200.13.237.46 ip4:201.232.123.67 ip4:54.86.63.64/26 ip4:5" "4.219.188.0/26 ip4:54.219.191.0/25 include:spfip.emtelco.com.co include:spf.protection.outlook.com include:email-od.com include:spf.fromdoppler.com -all
Cloud / SaaS Services Detected
Microsoft 365 Cisco Duo

Leak Screenshot:

Leak Screenshot