Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

FERRAN-SERVICES.COM

ferran-services.com

Group Clop
Discovered 2022-12-22 20:02 UTC
Est. attack date 2022-12-22

Description:

AC & Heating Services in Orlando, FL - HVAC Installation throughout Volusia, Winter Park, Windermere, Oviedo & Lake Mary, FL

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain.operationsweb.com
MX Records
  • us-smtp-inbound-2.mimecast.com. Mimecast
  • us-smtp-inbound-1.mimecast.com. Mimecast
TXT Records
  • 0ed1fe018a6665b75bdc0c4ba38c136f102090ee0e
  • sophos-domain-verification=9b23aaec400230f4630921984fda5f60754a516b1b28d8529acace3b83172f8c
  • duo_sso_verification=S13eAUqkJvw6PL8k4EygOkaQ3dsZn88OBJeCNosBwjDJDWzfZ49Ea3DKVf5OlSAQ
  • v=DMARC1; p=none; rua=mailto:bedwards@ferran-services.com,mailto:dmarc_agg@vali.email; ruf=mailto:bedwards@ferran-services.com; fo=1;
  • MS=ms37570223
  • v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all
Cloud / SaaS Services Detected
Microsoft 365 Cisco Duo Mimecast Sophos

Leak Screenshot:

Leak Screenshot