Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo FLUKE.COM

Group: Clop

Discovered by ransomware.live: 2025-11-13

Estimated attack date: 2025-11-13

Country: US

Description:

[AI generated] Fluke Corporation is an international company known for its production of electronic test tools and software. Established in 1948 in Everett, Washington, Fluke has become a global leader in the commercial electric test tool and software industry. Its products serve diverse markets such as wireless networking, precision measurement, and condition monitoring, helping various businesses and professionals across the globe.


🕵️ Infostealer activity detected by HudsonRock

Compromised Employees: 5

Compromised Users: 1668

Third Party Employee Credentials: 17


External Attack Surface: 109


Infostealer Distribution


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuse safenames.net
  • cgeeulgahida idp.email
  • hostmaster safenames.net
MX Records
  • mxb-001d2f02.gslb.pphosted.com.
  • mxa-001d2f02.gslb.pphosted.com.
TXT Records
  • cursor-domain-verification-rdbgrk=x6boucAwQILcaJItXsnbcPOHU
  • klaviyo-site-verification=S7Fxiv
  • google-site-verification=0lBF82HC7EotYmZcq0JydEd66egAAQRWLvGrCyrKY6M
  • ca3-acb7ec12301b4bb09eb54fe39763b445
  • flexera-domain-verification-ajxmcvgivfmszctu
  • google-site-verification=v2rnO3-lW8t65yfFJv0TacxV06ELmCrUtRodLfVAQRk
  • atlassian-sending-domain-verification=0c0cc069-94bb-4c99-a0c6-41341bcdc04b
  • z69bwnxl0crh6xzkbxt452zqggfmwb76
  • msfpkey=6ao8trze816pmh76vgwucso31
  • miro-verification=e7fb47f3794ac29bac582246283a63df57352189
  • atlassian-domain-verification=aFqZRkAg10BNJtEWugNVVI8u51DJmoGwcp5A/pawmoHAxzrJ/bf1WCmOxJNH9bZ1
  • mandrill_verify.cgSNlbIM5Cm5DA7mHS5yPQ
  • canva-site-verification=9TLkysK9W99ckNttCYx3IQ
  • MS=ms68475308
  • atlassian-domain-verification=pCI1ZcQBf2dMXkXWuKEuV8t89LuXntz8FJEePhxeG609QvWTGrExGzT7fP/zG0tK
  • ca3-1051bf75e5ca48f1a05c608e167036af
  • 6uw9XZVuaNL7O6a2elyhHRjBYNEbUj14R8x5T4bgxa+DvUOdwXo2d9Sh4DNxmlQxTI/CHZT6Zk/2nlyNn8qH5g==
  • _7wys0c8jkmxxmzobncx2nht1lcc7ihp
  • 20w3lmtz9rwz0sm33skks8b01hzgnt1w
  • v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all
  • autodesk-domain-verification=MCem-00fUtrRbHsug7F2
  • mixpanel-domain-verify=ebb47e9a-6751-4bb9-8bbb-38f93b235812
  • amazonses:zSZ8VKbSShaTR0/V6ADVlURdJC/P2mSBRme7m4V6UQY=
  • mandrill_verify._axXJvxupPgZiSk2eY7-_w
  • b6wj2vfw60hbd3ycgtqw2bbx78sxk7q6
  • d365mktkey=QDehx1JByN7QsAK2K55zUmlMTKKsyd54NSuuVDmpj1kx
  • docker-verification=043638e9-c30f-4057-86c0-e0d544175c85
  • intacct-esk=4FED1A5021C3D94FE053ED06A8C0E14D
Cloud / SaaS Services Detected
Atlassian Amazon SES/WorkMail Mailchimp Microsoft 365 Sage Miro Autodesk Flexera Proofpoint

Leak Screenshot:

Leak Screenshot