Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo Meinhardt Malaysia

Group: Direwolf

Discovered by ransomware.live: 2025-11-26

Estimated attack date: 2025-10-24

Country: MY

Data exfiltrated: 500GB

Description:

[AI generated] Meinhardt Malaysia is an engineering consultancy firm that offers a diverse range of professional engineering and project management services. The company was established in 1973 and it's a subsidiary of the Meinhardt Group. Their service spans across multiple industries including Building Engineering, Transportation, Water & Environment, and Urban Development. They have numerous landmark projects in their portfolio including the planning and design of technologically advanced buildings.



DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain.operations web.com
MX Records
  • meinhardtgroup-com.mail.protection.outlook.com.
  • mx2.hc570-84.ap.iphmx.com.
  • mx1.hc570-84.ap.iphmx.com.
TXT Records
  • v=spf1 include:spf.protection.outlook.com -all
  • n1k4nfk2fel2jspspr4thnt69v
  • l9hp1l8b9u006resie0h2kjvpc
  • atlassian-domain-verification=eN37QoUHNTyCCQ5lxbkQT5zz7v6Of65jsbtXGY3NIQ1U1qUFAJlngTJsbN9O4cT6
  • include:spf-au.emailsignatures365.com
  • 2s07dekehh8djfo3ojjb78tist
  • v=spf1 include:_spf.createsend.com include:spf.protection.outlook.com -all
  • MS=ms85268068
  • v=spf1 include:amazonses.com ~all
  • 3ok6j8ite5b2kguul4lomm8li8
  • atlassian-sending-domain-verification=435348a2-508a-427a-af89-24cd7f5c6e53
Cloud / SaaS Services Detected
Atlassian Amazon SES/WorkMail Microsoft 365

Leak Screenshot:

Leak Screenshot