IREM companies
IREM companies
Group: Qilin
Discovered by ransomware.live: 2025-10-23
Estimated attack date: 2025-10-23
Country:
Description:
IREM companies, USA - is an international institute for real estate and asset managers, promoting management through education and information exchange. IREM conducts real estate management training courses, organizes national meetings of rea ...
🕵️ Infostealer activity detected by HudsonRock
Compromised Employees: 1
Compromised Users: 52
Third Party Employee Credentials: 1
External Attack Surface: 22
Infostealer Distribution
DNS Records:
The following DNS records were found for the victim's domain.
WHOIS Emails
- domain.operations web.com
MX Records
- irem-org.mail.protection.outlook.com.
TXT Records
- google-site-verification=dCsZ8BVVojL3vyEyJt-osymCCFddIfNWdeVkGROY2FU
- google-site-verification=E7Nd1ESlPj8YUihk4jZR0L-4WSV9bdCRpRtY6dHjK_Q
- v=spf1 ip4:148.163.156.229 ip4:216.33.126.11 ip4:192.254.116.40 ip4:162.251.133.2 ip4:67.205.172.190 ip4:192.254.116.40 ip4:34.235.62.90 ip4:184.72.174.126 ip4:3.213.143.227 ip4:172.16.0.38 ip4:172.16.0.50 include:22645210.spf10.hubspot" "email.net include:salsalabs.org include:spf.protection.outlook.com include:_spf.votervoice.net include:_spf.qualtrics.com ~all
- o=~; r=mrodriguez@irem.org
- r6p0yK0lT7XSYe4HWY0iGo6lmgLfadBEEMMCgEYToKkQ2tThNFbkdGbI8QXC3iOdAevcw/3yJfEpzeV8zN4vog==
- v=DKIM1; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDGCQo3lCwzRdTbK6UxNlE1S7i/WLBnxxYc5nhnXS7+kV+mfyJYF5YJD1a8FwX9SNfw1+36fz+nIXvFQqSbPP5xOkSh5nfIc2a6MBhaStuVLI/ixQFyY8RZq+Z81uwUpWXEmzMKdlj8hkECUdG00ng2ZwBmeLpMXkfRDrW3oeIu4wIDAQAB
- airtable-verification=1484483d13d6c8332281b130f0c08a69
- MS=3253613DA8B5B32C6D416FD62892FE762EA869F5
Cloud / SaaS Services Detected
No well-known cloud or SaaS service detected.
Leak Screenshot:
