Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks


Group Ailock
Discovered 2026-07-15 09:20 UTC
Est. attack date 2026-07-15
Country ES

Description:

Headquartered in Ferrovial operates as a global infrastructure and mobility operator. The company's services include the design and construction of public and private projects, and development, finance, and operation of toll road concessions.

Infostealer activity detected by HudsonRock

Compromised Employees: 147

Compromised Users: 16

Third Party Employee Credentials: 106


External Attack Surface: 27


Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • mxa-006a0501.gslb.pphosted.com. Proofpoint
  • mxb-006a0501.gslb.pphosted.com. Proofpoint
TXT Records
  • amazonses:fSsLid87Z5rdg5GHePTf4uAj1Cslv4AeNIIjUoB9CKQ=
  • apple-domain-verification=ykLBJPeFdSZMGku9
  • G0R0U32432
  • onetrust-domain-verification=90fd6d2202b94c9988d7471eb44d404b
  • r4p3aqu1eantahcdcs13f7g8hs
  • atlassian-domain-verification=KBg5CU1qg70Ia7i1KEOi3M9DuAQB/38OO8udqxaunPpxoa7n5/j1G9ATSWXIQ2hu
  • smv=3bbuef2ti9vuhx5e
  • 465a1be4e450479b934fddd6a4a0e2fb
  • /+BLxZFx1fD1qtAKER5V/L1dzmIxJqvdAL2G54Aplu73ADivDWnWmZ9ckcz7oxcrsjgqAySG6N64cY8Km+9rKw==
  • airtable-verification=10e996e4e560e9f543bb99a0edb8962e
  • ibmid=dcc85a39-7078-4522-a402-ae98be4b0245
  • _h56n84rkq2i8oeiqgl28hj7bw3jjo9t
  • knowbe4-site-verification=8b1a2d239c8f6c06a5cd61ed174a7652
  • adobe-idp-site-verification=5b59905fd0b468a6e04fec0cf7fef5eb56e3ab6109aaf3d42a7f875a8d381c22
  • atlassian-domain-verification=LEqBcUVYfMpDsrJmNrdnX3BA0RJCZsGkUy1GDjUcyZtuyfr2Yr0utIjhvbTU/iMi
  • google-gws-recovery-domain-verification=59132205
  • MS=ms14646556
  • atlassian-domain-verification=KPMYjvLPNBaQrZAg1TkFwW/7R18NNwTTSFDTrtAeXx4XlkaUNRta5rwjPKLS9IQh
  • anthropic-domain-verification-ehc9rj=rCkSJq7ICK45Ir4QNteK77bmt
  • _l4b68xp91ncyvesk88didhrkozhu1gd
  • workplace-domain-verification=17NAeKYXHlNPF0C8Hp1vyAyF76vJOL
  • google-site-verification=wUK-MZGMra1N2XRN7q1uNDVVnZIS_ScSZOaWoHWlvt4
  • teamviewer-sso-verification=03478cc3b5034743a8ee9a771267fd9a
  • v=spf1 ip4:213.4.80.30 ip4:213.4.88.30 ip4:167.89.76.154 include:spf.protection.outlook.com include:spf3.ferrovial.com include:spf4.ferrovial.com include:msrv-smtp-01.aspl.es include:_spf.salesforce.com ~all
Cloud / SaaS Services Detected
Adobe Apple Atlassian Amazon SES/WorkMail Microsoft 365 Salesforce Anthropic Teamviewer KnowBe4 OneTrust Proofpoint