Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks


Discovered 2026-07-19 10:13 UTC
Est. attack date 2026-07-17
Country CO

Description:

$33.1 Billion. www.***.com.co ECOPETROL copetrol SA is a company organized as a public limited company, of national order, linked to the Ministry of Mines and Energy. It has operations located in the center, south, east and north of Colombia, as well as abroad. It has two refineries in Barrancabermeja and Cartagena. Through its subsidiary Cenit, specialized in hydrocarbon transportation and logistics, it owns three ports for the export and import of fuels and crude oil in Coveñas (Sucre) and Cartagena (Bolvar) with access to the Atlantic, and Tumaco (Nariño) on the Pacific. Cenit also owns most of the country's oil and multi-purpose pipelines that connect production systems with large consumption centers and maritime terminals. Ecopetrol also has a stake in the biofuels business and is present in Brazil, Mexico and the United States (Gulf of Mexico and Permian Texas). 1TB+ Stock Symbol = ECOPETROL

Infostealer activity detected by HudsonRock

Compromised Employees: 556

Compromised Users: 2871

Third Party Employee Credentials: 558


External Attack Surface: 167


Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abusegodaddy.com
MX Records
  • ecopetrol.in.tmes.trendmicro.com.
TXT Records
  • 2D2247E3F36C27ABAD657129B979F04BE392109EF14E12F83591CC47FD77317E
  • ecpwebviajerosprod.azurewebsites.net
  • www.ave.ecopetrol.com.co
  • www.ecopetrol.com.co
  • docusign=761579a9-ada6-4e3d-a941-7ac16fdfe26c
  • Z6nMOSzI/GskOd/GDc5JV+hsOd9aHIWy33pWcMVA8hUAjnK6EieOKj9XqyW/t39Vd7fYVmsoF3pPG0AYB7/C+w== qwmuw75796C1rs+SSjozjPXENo0UKqgVMF3Xic1dfa0OQRqKXCe4xrB1TIqNdFmo6vYrKYovaKapxnGKXAVblg==
  • apple-domain-verification=0EyClqYN6fxGLA79
  • N81UZSFR3WV90AEDMJOJQ1YDNM0Y3IHW1EWZHXTQ
  • b642a891-9b74-429a-b98e-f13694245309
  • d5zR2dBvZwXrx19jjB6clAJPE9rE2RZ4K
  • C2A94663B8A337B17202
  • 2D2247E3F36C27ABAD65
  • pexip-ms-tenant-domain-verification=6f46021a-d141-490f-8428-23c9ece3b16e
  • nafm72qf3lg39b7j8s05u1ejcc
  • ihosv6qqorpfehagtpfbqqlgjh
  • v=spf1 include:spf.protection.outlook.com include:spf.tmes.trendmicro.com include:spf1.masivapp.com include:email-messaging.com a:hybrid.ecopetrol.com.co ip4:181.56.29.240/28 -all
Cloud / SaaS Services Detected
Apple DocuSign