Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

JCWHITE.COM

jcwhite.com

Group Clop
Discovered 2022-12-22 20:02 UTC
Est. attack date 2022-12-22

Description:

403 Forbidden

Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 0

Third Party Employee Credentials: 1


External Attack Surface: 0


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuseenom.com
MX Records
  • mx1-us2.ppe-hosted.com. Proofpoint
  • mx2-us2.ppe-hosted.com. Proofpoint
TXT Records
  • ppe-c75ec47fc8f8f91e91bd
  • v=spf1 a:dispatch-us.ppe-hosted.com mx ip4:216.242.251.92/32 ip4:170.55.8.114/32 ip4:170.55.8.90/32 ip4:54.236.247.209 include:servers.mcsv.net include:spf.protection.outlook.com include:mail.resova.com -all
Cloud / SaaS Services Detected
Mailchimp Proofpoint Essentials

Leak Screenshot:

Leak Screenshot