Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

INRIX.COM

inrix.com

Group Clop
Discovered 2022-12-22 20:02 UTC
Est. attack date 2022-12-22

Description:

Leading Transportation Analytics Solutions - INRIX

Infostealer activity detected by HudsonRock

Compromised Employees: 1

Compromised Users: 33

Third Party Employee Credentials: 6


External Attack Surface: 22


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abusesafenames.net
MX Records
  • inrix-com.mail.protection.outlook.com. Microsoft 365
TXT Records
  • sending_domain171932=35c629598cc77dda157fc36b6335f3baaa33bd511789563966a75d116187b1b6
  • _globalsign-domain-verification=r-DQAFgvX_9We-sMtSjp9ARuP10NNvXE8vrDAEMY_N
  • _globalsign-domain-verification=umXhGN00jtLA4RwURAKEW3K02m--zIjWTfCGReaLnu
  • _globalsign-domain-verification=fVeSa6p7Px9hHpaV6Op9UZEaUZoGXesdHWNNMNFUPt
  • MS=ms96872803
  • vpce:wCtkXHGMYcTVgIg641Qx
  • adobe-idp-site-verification=b5d394d9fb01f52b03d973d0aafa9b82e080c4caabdf96b474e62f115f7fc5c4
  • MS=9A94D8F5505F5FA75816DC4CBDA843667E45F67A
  • v=spf1 ip4:139.178.91.36 ip4:35.177.124.81 ip4:3.11.35.94 include:spf.protection.outlook.com include:email.chargebee.com include:_spf.salesforce.com include:aspmx.pardot.com include:mail.zendesk.com include:amazonses.com ~all
  • asv=9e9d97c6742f139f8e2574a455447315
  • apple-domain-verification=sFh7VBSZ4dmKPJvN
  • pardot_171932_*=da3ab17a54b3da698c6d01686f03015c073c9e706b2e122e78e25b427fdc9595
  • notion-domain-verification=jnl9YCZeSGxckSERy0QHMTeAmtvB3zYysqlm3a6yG2A
  • pendo-domain-verification=CeXiSQwhlBjBoXLnhpAyCPipyHs
  • google-site-verification=3a1h1gTYiURKzVofP-NJn3yiR22QGEwSIy9GSEbW0e8
  • pendo-domain-verification=25d1f2de-7f78-4aee-85f6-5efc2524cf7e
  • google-site-verification=Txzu7S2gkqCK1LOdet8bhX-yDaK4EDK_G_SVVOmuv48
  • inrixtrafficredirect.azurewebsites.net
  • _globalsign-domain-verification=wvy77PR-M_JVc_n6qyl3GtDy1RaJVyfcrGTY_Gy6F1
  • atlassian-domain-verification=2BQImy6gBVwpE+bgFo93ZdZoACPXtAIdRCEPHoqZWTMv/5Vkxq0XxztbcS9tngFU
Cloud / SaaS Services Detected
Adobe Amazon SES/WorkMail Apple Atlassian Global Sign Microsoft 365 Salesforce Stripe Zendesk

Leak Screenshot:

Leak Screenshot