Buy Me a Coffee

Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo Kadokawa Co Jp

Group: blacksuit

Discovered by ransomware.live: 2024-09-10

Estimated attack date: 2024-09-10

Country: JP

Description:

http://ng2gzceugc2df6hp6s7wtg7hpupw37vqkvamaydhagv2qbrswdqlq6ad.onion/dwango/

🕵️ Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 184

Third Party Employee Credentials: 0

External Attack Surface: 0


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • aspmx3.googlemail.com.
  • aspmx.l.google.com.
  • alt1.aspmx.l.google.com.
  • alt2.aspmx.l.google.com.
  • aspmx2.googlemail.com.
TXT Records
  • facebook-domain-verification=zpka5ufiqapf1bpzblb96rrw7iw6yh
  • google-site-verification=_uYdCsmcrmKc-vG9VcoBXODwi7UU-28n_ELqMUl2LWs
  • google-site-verification=rzt2P5oDH25Rak-JzTKbbesdq0Yy-RAV_At3IedOw4I
  • nulab-verification-code=cu1cQmftFI8fSECWe6VEl1jPy8LtAUnKuNlWIxpSgmFnPbejHY5YH5Lor6S4u6Ec
  • v=spf1 include:_spf.google.com include:spf01.email.s-idc.net include:spf-bma.mpme.jp ip4:163.49.12.12/30 ~all
  • workplace-domain-verification= 27b81cb2-6317-43ad-b8c0-af04876a0edc
  • apple-domain-verification=TOWEGyQu4PBgKhu9
Cloud / SaaS Services Detected
Apple

Leak Screenshot:

Leak Screenshot