Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo Loreto Normanhurst

Group: medusa

Discovered by ransomware.live: 2023-05-22

Estimated attack date: 2023-05-22

Country: AU

Description:

Loreto Normanhurst is an independent Catholic, primary and secondary day and boarding school for girls, located in Normanhurst, a suburb on the upper North Shore of Sydney, New South Wales, Australia. Established in 1897, Loreto has a current enrolment of approximately 1,175 students from Year 5 to Year 12, including approx. 185 boarders, and is the largest girls' boarding school in New South Wales.



DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • au-smtp-inbound-1.mimecast.com.
  • au-smtp-inbound-2.mimecast.com.
TXT Records
  • v=spf1 mx ip4:103.252.152.15 ip4:104.130.122.0/23 ip4:146.20.112.0/26 ip4:141.193.32.0/23 ip4:161.38.192.0/20 ip4:209.61.151.0/24 ip4:166.78.68.0/22 ip4:198.61.254.0/23 ip4:192.237.158.0/23 ip4:23.253.182.0/23 ip4:104.130.96.0/28 ip4:146.20.113.0/24 ip4:1" "46.20.191.0/24 ip4:159.135.224.0/20 ip4:69.72.32.0/20 ip4:3.105.240.248/32 ip4:103.27.34.34/32 include:au._netblocks.mimecast.com include:sparkpostmail.com include:spf.au.exclaimer.net include:spf.mandrillapp.com include:spf.protection.outlook.com include" ":spf.emailsignatures365.com -all
  • cn3lr203ro7gpbc6jnq9kat3ac
  • uich0as4aj91d5uo3mhm0hpj0d
  • 7msv68860ccds1d7gge86pqge9
  • 7lp1is6gbe34vbn0233f3enct8
  • jfvmlbcbkv6a53lidtrm1u2v34
Cloud / SaaS Services Detected
Mandrill Mimecast

Leak Screenshot:

Leak Screenshot