Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Junta Local de Conciliación y Arbitraje

cdmx.gob.mx

Group Tengu
Discovered 2026-02-10 14:32 UTC
Est. attack date 2026-02-10
Country MX

Description:

Affiliated with the Government of Mexico City, it provides information and services related to the Local Commission for Labor Conciliation and Arbitration (Junta Local de Conciliación y Arbitraje) in Mexico City (Ciudad de México).

Infostealer activity detected by HudsonRock

Compromised Employees: 482

Compromised Users: 49902

Third Party Employee Credentials: 139


External Attack Surface: 200


Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • alt1.aspmx.l.google.com. Google Workspace
  • aspmx.l.google.com. Google Workspace
  • alt3.aspmx.l.google.com. Google Workspace
  • webmail.cdmx.gob.mx.
  • alt2.aspmx.l.google.com. Google Workspace
  • alt4.aspmx.l.google.com. Google Workspace
  • correo.cdmx.gob.mx.
TXT Records
  • a7nqu6el81fbuf216bcoas90mh
  • sfp59n7svbj81l1tpfryfzpbmwhjtd9k
  • globalsign-domain-verification=DC1DE943D56532394BAA3B9E331CE292
  • s2hbcj96smxjsh003d0n149238bhyhx0
  • cisco-ci-domain-verification=177bfa603abe61aa215640884f659c6ab2c380ad94a8ff455c94f7dfd4828989
  • ng1vh3l8sn6snd3b3gose8s4rh
  • v=spf1 include:spf.ipzmarketing.com mx ip4:189.240.234.150 ip4:189.240.235.197 ip4:187.218.8.18 include:_spf.google.com include:spf.mandrillapp.com include:_spf.fortimailcloud.com ~all
  • google-site-verification=ExzrGRIkCCI7Qe_SyIDFBm5PuUICelNMwKmcCcRh_Pw
  • google-site-verification=OLwcfC_aH0DevlBcBSvlRIi06nIRiWIMowtM9LiF4rQ
  • globalsign-domain-verification=e300541aa2622674c9675210607b301c
  • 3625jslccato3e3fv9hpmfp81j
  • 4f8goqv6m37q93isj39924agv
  • j6bfc7m3qij8lvb01mpglhao41
  • globalsign-domain-verification=56C6660F7012312FB27BDB1F5A87FC01
Cloud / SaaS Services Detected
Mandrill Cisco Fortinet

Leak Screenshot:

Leak Screenshot