Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

NATUS.COM

natus.com

Group Clop
Discovered 2022-12-22 20:02 UTC
Est. attack date 2022-12-22

Description:

Welcome to Natus - Natus

Infostealer activity detected by HudsonRock

Compromised Employees: 4

Compromised Users: 53

Third Party Employee Credentials: 6


External Attack Surface: 22


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abusegodaddy.com
MX Records
  • natus-com.mail.protection.outlook.com. Microsoft 365
TXT Records
  • logmein-verification-code=daba9911-c57a-4357-b5e9-f06fcefc330f
  • MS=29677684
  • v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all
  • google-site-verification=DEJ4OYhyjQfoaLv_o7yBuA6vlXYfAQk3HD3wq6koSrU
  • atlassian-sending-domain-verification=a22a831c-f841-4abb-99e8-1443a5d991e8
  • google-site-verification=m7TTIkAcp0vixasI3AoD7hknn2F5IfGP0pa7DaDm9P8
  • atlassian-domain-verification=fWEbG/za3agXbwyasq3IaPCMlyVFEjTIQgo2FzVpgxyvFyUh8POpJdC424sJaaz9
  • fu37fl1iinnh8c8s5mbjbk1imo
  • fu37fl1iinnh8c8s5mbjbk1imo.
  • b2cj8i0c5j9chv9bchh1g8cqlp
  • troqi4f898etsbgtkv3jbe2r61
  • apple-domain-verification=rsoJh02emCKhbOPM
  • MS=ms53959329
  • dropbox-domain-verification=j1zhwicphwaq
  • MS=ms53444200
  • MS=ms24793053
  • MS=ms66251879
  • mVlWm6ZCmypv+Cavv1WNhZZz0/Wd+QbxcM9evl637JanM/57yVgyLyW5I99foyCUAAg3AKxUWgVfSdN1jPXyZA==
  • d5xnwmszm2xzwgpfwbp6vnztl9s3ss2z
  • sf3h546k21ajp2d7q0itvm09io.
  • sf3h546k21ajp2d7q0itvm09io
Cloud / SaaS Services Detected
Apple Atlassian Box Dropbox LogMeIn Microsoft 365

Leak Screenshot:

Leak Screenshot