Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo Lupin Limited

Group: Killsec

Discovered by ransomware.live: 2025-03-28

Estimated attack date: 2025-03-28

Country: IN

Description:

N/A


🕵️ Infostealer activity detected by HudsonRock

Compromised Employees: 63

Compromised Users: 162

Third Party Employee Credentials: 144


External Attack Surface: 141


Infostealer Distribution


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuse-contact publicdomainregistry.com
  • winniesaldanha lupinpharma.com
  • bhaskargangula lupin.com
MX Records
  • lupin-com.mail.protection.outlook.com.
TXT Records
  • lupinstaging.azurewebsites.net
  • hf5stakv0m9q4l8tog87umo6kj
  • adobe-idp-site-verification=3036c357be3686c2d5aa8937a6d023a48ef42ccb8c1b8f500f3af4330f27ce1d
  • lilsfj0485casno846cek5is1i
  • 21etsqk36r453r3hq4ladsk1rf
  • MS=ms91884035
  • l1qfdediubarrus7e307rqfle2
  • 7m6cact6k2t0s6fbdmds7mtiid
  • 35q20cs75cfl1ssobdqc9vu9ho
  • jv0d61s0c86qm6g67mo6ve1l1h
  • u6clq6v10ello7fs9i2jc0th0
  • webexdomainverification.ER52=f41e01da-7a0e-494a-b5bb-780fbc35f47d
  • fchtlns22hcfkee6rl1igfoi8u
  • docusign=a5d19a11-d078-43e2-9645-b400bcab5a7b
  • 3kpkbt6e7qohpri60is3m8m6v5
  • v=spf1 include:spf.protection.outlook.com ip4:115.112.88.163 ip4:14.141.178.65 ip4:124.247.204.193 ip4:45.126.255.210 -all
  • 33vpu3g44khjs8vrvqa88gm2ti
  • jth5ntqjojb0ejqnkplbkd3dev
  • 1k29n15m68dbhgmifhoi2k4q3a
  • fmtqonvi37ds248r69neip57v3
  • v=DMARC1; p=none; rua=mailto:investorservice@lupin.com
  • 8ulupf114cdk0e8sj2sbiiqom9
  • k6c1846154maqdj9p6p9af037g
  • masterclass2018.azurewebsites.net
  • 11047565
  • j7elqnd0rvfrvvpgf5blnfcha3
  • google-site-verification=qaE_daoZXdTY7zt1tnNO-1i3VPt6BRFzoelmtFkK-co
  • oe9lvsc6e7e4t872tktpac5ms9
  • 33ooudk7lgo8l856t7f70nqspi
Cloud / SaaS Services Detected
Adobe Microsoft 365 DocuSign Cisco Webex

Leak Screenshot:

Leak Screenshot