Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks


Group Rhysida
Discovered 2025-11-04 08:43 UTC
Est. attack date 2025-11-04
Country US

Description:

Invacare Invacare, founded in 1885 and headquartered out of Elyria, Ohio, is a manufacturer and distributor of home and long term care medical products. More

Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 38

Third Party Employee Credentials: 13


External Attack Surface: 21


Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain.operationsweb.com
MX Records
  • invacare-com.mail.protection.outlook.com. Microsoft 365
TXT Records
  • v=spf1 include:spf.protection.outlook.com include:spf.docuguide.com include:spf.invacare.com include:_spf.atoracle.com include:spf.oracleemaildelivery.com include:eskerondemand.com include:145813620.spf08.hubspotemail.net ip4:92.43.124.146 ip4:164.138.244" ".1 ~all
  • MS=ms66584266
  • bgbk8orbs79suhc2evj0dcrn8p
  • lg2vlb3zvw8r595z20s65cm4wljgmghw
  • google-site-verification=f_Ut6oShgP8-WQN-nOswR2Lwv1egStJoWfsx9AdUF1E
  • sgmnmoquo1c66n0e3bb7sre89g
  • google-site-verification=ayGnZYwY_sjj1gzjxLGvBpUFZxLigEF2vz66eimVPpY
  • apple-domain-verification=XduUdQedE4X6BgDT
  • adobe-idp-site-verification=f3b42b7f7be3c6e5f58c63f2790bb6519db4fbb5839db1c280619ab230ef5ae5
  • bm5k8r16l44ygpp33gsl253w5grw4rfc
  • miro-verification=e986db2c15eb7405fe345724c951b46ae1169125
Cloud / SaaS Services Detected
Adobe Apple HubSpot Microsoft 365 Miro

Leak Screenshot:

Leak Screenshot