Buy Me a Coffee

Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo Magicolor

Group: hunters

Discovered by ransomware.live: 2024-04-28

Estimated attack date: 2024-04-28

Country: CA

Description:

Country : Canada - Exfiltraded data : yes - Encrypted data : yes


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • registraire riq.net
  • dnsmaster oricom.ca
MX Records
  • mx-cluster-ca03.hornetsecurity.com.
  • mx-cluster-ca02.hornetsecurity.com.
  • mx-cluster-ca-fallback.hornetsecurity.com.
  • mx-cluster-ca01.hornetsecurity.com.
TXT Records
  • duo_sso_verification=xX1UIdfs7xucGe0MHR9mhnhwjut4BnxELDuF917HLyGUcLIK1ECWDufCyQzkXcVh
  • MS=ms67832786
  • v=spf1 a:dispatch-us.ppe-hosted.com include:spf.protection.outlook.com include:spf-orm.oricom.ca include:spf.hornetsecurity.com -all
  • ppe-6e7f9c4dc75b1ccdf951ddb8b02801ce5d5a3c0e
Cloud / SaaS Services Detected
Microsoft 365 Cisco Duo Proofpoint Essentials

Leak Screenshot:

Leak Screenshot