Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks


Discovered 2026-05-01
Est. attack date 2026-05-01
Country US
City Raleigh

Description:

[AI generated] LexisNexis is a global information and analytics company headquartered in the United States. It operates in the legal, regulatory, and business intelligence industries, providing research tools, data analytics, and risk management solutions. Its platforms are widely used by legal professionals, law enforcement, and enterprises to access vast databases of legal documents, news, public records, and compliance information.

Infostealer activity detected by HudsonRock

Compromised Employees: 49

Compromised Users: 3668

Third Party Employee Credentials: 31


External Attack Surface: 123


Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • whoisrequest@markmonitor.com
  • abusecomplaints@markmonitor.com
MX Records
  • lexisnexis-com.mail.protection.outlook.com.
TXT Records
  • facebook-domain-verification=" "g6cmq4oko64h1gjhy7dkniag7ku5kb
  • cisco-ci-domain-verification=2d7c39a7c233dcaf1174882db640ffa59e579e5375d2d00a38e0d0f4ecdb3e67
  • pardot1020222=f6855c0731bacfc5774557f856213f2b93ef23c085d8ffd9c681960e5028219b
  • anthropic-domain-verification-jh44hw=jzyG4ohMTmk7jUNz5SdtMdWyH
  • slack-domain-verification=6Fs5lrs127t66165SRX4kKaQlKpbQry9cVsZpSbp
  • onetrust-domain-verification=843d879653584ea7b545ef842cd13b11
  • _ucaj3hzrowyadogalc9an52dnqorzyb
  • _ene816jlthyl0j6udwog3148m255lp2
  • onetrust-domain-verification=1d24ebf1576b4466add8b2f781d3d902
  • v=spf1 exists:%{i}._i.%{d}._d.espf.agari.com include:%{d}.33.spf-protect.agari.com -all
  • zapier-domain-verification-challenge=f8dae159-fc12-442e-87f6-be02edac0f63
  • AXw1tdfIuU9b7b6NhpHgxVt4wvmtCYcuWENPieRrGx0=
  • google-site-verification=JUSVSgKctH4TF38tZyDPNmZ8QxJ0zmUgov2sriW3a0I
  • VvfeQSRIsxT4RrK4Z8xwBoF4dny2TAKc3uBogPZh911sXexDIEF3iK4zy4mVzexj9pQTvmkqzvlvGxMJ6+FIAQ==
  • pardot899741=7813ebaeb3c147a17b7e00d5a8af4b6a480ba23567bb6fa37fd055e556494a03
  • webexdomainverification.=10016647-2f54-4099-b985-db46b7f811bc
  • webexdomainverification.=98455431-ecca-47f7-b74c-db6f39e5df0c
  • pardot899741=7fad9f59001d1b63f99cb7c30d03cf4e993362b26290e1e703844b83fd324a03
  • pardot682313=a55158ece703897aaa0a119379e16003cdfa45ad3c87d2cb1f1b2dd3a3e4f017
  • apple-domain-verification=kq0qmtQYbGFhbCNe
  • pardot899751=ac79bfb84cd1fdf91244ff3b8b24b5bd04e57ac936f730451348d8432d78686c
  • miro-verification=39a0a4ee76533d3eb6ef3701caa0a7817f8d3390
  • pardot682313=c2a8d9dbaa032dca9785a38893ee3e0563f2227e1214fa94e155928cbe00b2ac
  • MS=ms99617937
  • google-gws-recovery-domain-verification=64642360
  • pardot200072=8bbbddef393795c0b367eaa8556582b8483ae4a4fc56c090c00b03721934a069
  • pardot899741=4d6a245a8421164ff6507db4fd629bc9060ee465dd2f10952fdb30a91e0380fc
  • ZOOM_verify_uE8UJePvRJuQ1Pc8Z0tVj0
  • smartsheet-site-validation=socDQWpHCnktSj6-goC2CPywT68XkmU6
  • adobe-idp-site-verification=fd4fae74b683e6e22ef9b491871ae9f0faf7856b8a8588d267e24565628d2dbd
  • canva-site-verification=OLO5hngordp0CTr-RvwC5A
  • webexdomainverification.=0b066749-67a2-41d5-b483-5bc225de67e1
  • pardot899741=5bea8ec8215073c65f9365fef8b5aed7b97eb32215d3bba8155758c7b5554846
  • pardot1028433=19772e49dc233e068d316ff928c45f12f0d2285a064ba1b29dd7b0963090ab7b
  • webexdomainverification.=9094f915-21e5-4e23-96f0-7cd5b236311d
  • zapier-domain-verification-challenge=04b7fdf3-37d3-4340-8136-491dbf7ea242
  • fastly-domain-delegation-dd439187-11102021
  • sending_domain1020222=1bc5e9bddf90f68f8cb3492c962733d87d72066ec6e9a0b3e4e59ecccbb1778f
  • sending_domain1028433=55066e08e19adcc207f5f3027c3804bb0a2d7f9f1dd68e81cf8d7fd5ae581a1b
  • figma-domain-verification=7e9fc71b9c170bbc3d49380395182fb0a28e13607a352e108abb89226af15693-1770995647
  • google-site-verification=rcdQIw9Aqm7sYGK3OX5TRkiJiJ5ZRtc-rqyDpow65uY
  • pardot1079963=5850afdb4436e3ad368e33be5e8834a6663091964b43d12b69178d13487f37b2
  • pardot1020222=e7958620038f304fedff0327e58b7ce8f3fabbee6ba642f8d39ca1c60af86187
  • pardot_200072_*=bd0fbecef50fc865c4efdb681fd569834d66927be682bfc5e8b11125ff462a53
  • pardot1020222=aa23dbd3c0ee77708b9ae8a89d4517df7b9f1e6fee42bf7177b78f13e02c52cd
  • pardot_322251_*=afc209af3ea666b0b8da5d0527d49c4e74dc2b37e4800df77b096360b4396e47
  • pardot1020222=43739bc9a9522d742aa6e31ac4646061774f58f19740ffc6e4a6f38261a8ed4c
  • pendo-domain-verification=NyDyUaV2ESqQWAgvRjhIsnDkFeM
  • pardot1020222=2ac5e6b5488fa603b8d462ab32278b251ca2607fab6fe29155ef599e0e6ed7d1
Cloud / SaaS Services Detected
Adobe Apple Microsoft 365 Salesforce Slack Miro Cisco OneTrust Cisco Webex Zoom

Leak Screenshot:

Leak Screenshot