Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo Manning Publications Co.

Group: fog

Discovered by ransomware.live: 2025-03-06

Estimated attack date: 2025-03-05

Country: US

Data exfiltrated: 55 GB

Description:

Extract from The 19 biggest gitlabs


🕵️ Infostealer activity detected by HudsonRock

Compromised Employees: 1

Compromised Users: 1759

Third Party Employee Credentials: 5


External Attack Surface: 104


Infostealer Distribution


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • trustandsafety support.aws.com
  • 848650be-026b-4f4b-87b9-8afbb52a1fc3 identity-protect.org
MX Records
  • aspmx.l.google.com.
  • alt1.aspmx.l.google.com.
  • alt2.aspmx.l.google.com.
  • aspmx2.googlemail.com.
  • aspmx3.googlemail.com.
TXT Records
  • k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDXL8wewm468uwl3TLZFILJ6AFdQk0F/ZcmVzXoBIF4/30d0HGLiN8G+CiGV4FqpUsiOlVzE3TKGnN0omYyUPh402h9PgpRL+bqwLwGyhy3M5o3eysFFwUu+nY0vsM0HuTlUG9jbL7N686ZYL3CzUcbvn+QY0gUN0gR1hX0VNaxCwIDAQAB
  • prowly-verification=a19f1c827e4eaaf62899ba45df980f143bca9bec44203c3d53dde70b756756b4
  • qab6hlk3ov4e4epk3lgt4d7d7v
  • v=spf1 mx ip4:108.168.131.194/32 ip4:52.26.202.191/32 a:stage.manning.com a:ops.manning.com include:_spf.postaffiliatepro.com include:authsmtp.com include:spf.happyfox.com include:_spf.google.com include:48055234.spf04.hubspotemail.net -all
  • 73tfoqcb8hhtpt1blvmmu3tr7s
  • MS=ms62722746
  • \"google-site-verification=0NT5D5NRawT_CqwjvrIPyJn1vjAtrSnQDfswczOwsVw\
  • bj9muff8gs8v69p5r025bdavo2
  • di887hi31jdg0stbclpo2keiqd
  • google-site-verification=Cdoj9xoIXjAkcACpYinGtNU4LEhnQC_ydL0WTPiqSkI
  • google-site-verification=JlYY9-4Adc6IR63TyPveTQfz7WQvahYoTPZtjYJsvNc
  • google-site-verification=w6qITI8qvZGbtYpzek0ZTWcmuVAbBO3w7zGulupr0RQ
Cloud / SaaS Services Detected
HubSpot Microsoft 365

Leak Screenshot:

Leak Screenshot