Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Logo JDADELIVERS.COM

Group: Clop

Discovered by ransomware.live: 2025-02-27

Estimated attack date: 2025-02-27

Country: US

Description:

[AI generated] JDADELIVERS.COM, also known as JDA, is a supply chain management software company that specializes in providing advanced solutions for retailers, manufacturers and logistics companies. Established in 1985, JDA offers a broad suite of services including inventory management, demand and fulfillment, warehouse management, and transportation logistics. Their innovative technology and expert services enable businesses to streamline operations, improve profitability and achieve sustainable growth.


🕵️ Infostealer activity detected by HudsonRock

Compromised Employees: 8

Compromised Users: 333

Third Party Employee Credentials: 0


External Attack Surface: 108



DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain.operations@web.com
MX Records
  • fr1prsmtp1.jdadelivers.com.
  • fr1prsmtp2.jdadelivers.com.
  • mailout.jdadelivers.com.
  • kcprsmtp.jdadelivers.com.
  • dlprsmtp.jdadelivers.com.
  • sl1prsmtp1.jdadelivers.com.
  • sl1prsmtp2.jdadelivers.com.
TXT Records
  • @
  • MS=ms30386808
  • MS=ms63488260
  • confluent-verification=7defa9de-929e-4e4e-9da8-1d7ce3c5f6a9
  • mongodb-site-verification=MGVPrYKoYnntViSPaDk6DWcqlJpEqy7F
  • mongodb-site-verification=lWvdlD59opsELu7KrOCI1EPnOP9VP4ZD
  • pendo-domain-verification=oMdI7EBtp2340QcjEdILbzdqnJQ
  • rovag_verification_token=7FA07A7808D247688ADD234734F08C48
  • v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com -all
Cloud / SaaS Services Detected
Microsoft 365 Proofpoint