Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

INDIABULLS.COM

indiabulls.com

Group Clop
Discovered 2022-12-22 20:02 UTC
Est. attack date 2022-12-22
Country IN

Description:

Housing Finance - Home Loan Company in India - Indiabulls Home Loans

Infostealer activity detected by HudsonRock

Compromised Employees: 151

Compromised Users: 1359

Third Party Employee Credentials: 152


External Attack Surface: 115


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • adadmindhani.com
  • domain.operationsweb.com
MX Records
  • smtp.google.com. Google Workspace
TXT Records
  • google-gws-recovery-domain-verification=61322493
  • atlassian-domain-verification=U4HWKbXJprYKB05RiyPRhR5PHPv7watu7BsYkGMSHuvIvBNqOa0aDf7OkYAWWIWN
  • v=spf1 ip4:34.93.6.27 ip4:52.172.131.135 ip4:34.100.200.45 include:_spf.google.com include:_spf.atlassian.net" " include:mailgun.org include:168807eac.spf2.netcorecloud.net include:16853091f.spf2.netcorecloud.net include:mailer91.com include:spf.protection.outlook.com ~all
  • google-site-verification=jH21IGBlEJIPmgc8ehFFSoMxtVKgXO7MO52LyRVLG_I
  • MS=ms76749352
  • _ouk9t551d2vviilj1ovw452dnoo3znf
Cloud / SaaS Services Detected
Atlassian Mailgun Microsoft 365

Leak Screenshot:

Leak Screenshot