Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Logo Insurance Agency Marketing Services

Group: Moneymessage

Discovered by ransomware.live: 2024-05-16

Estimated attack date: 2024-05-16

Country: US


🕵️ Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 1

Third Party Employee Credentials: 0


External Attack Surface: 2


Infostealer Distribution


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuse@godaddy.com
MX Records
  • iamsinc-com.mail.protection.outlook.com.
TXT Records
  • google-site-verification=ogdQuP-ZoJ-JTDqTl5PEOez25vlB81wVMcADP5RRe3k
  • k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDziBb7GuqWsBwSIhAg1vVyadjPLkH5NiPVV5R+HTeN7JmmECG8Yxmt8PNoc64C2r4g14mZc6WFwOrvWx+xApjmyKtkOhmP5Qf6cNoQUoR+uhPNeT7hVk6G56cp2ch/z6D4T76ge2pnbPWZeNO3QqwFpiGi6v9pfjrvG9sMEs1DwwIDAQAB
  • nordpass-domain-verification=305a754b5ac46ff9ebde721d90e5ed8d48d5d80923779b93fc19134ff2d883d7
  • v=spf1 include:_spf.iamsinc_com._d.easydmarc.pro -all
  • 0AuwHf2qNOHX98AKgqVGNFSnjDtBxUvtK2AxJnx2shQACmp4dzgkzLxg26mS739RS20RU3bsTnmD6zNqDhGeuQ==
  • 5016182cc15c9600f7ba3793e04e7af74b96c69834c4fc235bf04c39ede696d4
  • MS=ms96479319
  • Sendinblue-code:f1ef5ff16e1767e466c41755cbd5a279
  • aghgrgao2si7oa5fnv3qorg1ob
Cloud / SaaS Services Detected
Microsoft 365

Leak Screenshot:

Leak Screenshot