Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

NETZSCH.COM

netzsch.com

Group Clop
Discovered 2022-12-22 20:02 UTC
Est. attack date 2022-12-22

Description:

Just a moment...

Infostealer activity detected by HudsonRock

Compromised Employees: 9

Compromised Users: 10

Third Party Employee Credentials: 14


External Attack Surface: 13


Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • legalserviceseurodns.com
  • itserviceseurodns.com
  • domainmanagementnetzsch.com
MX Records
  • mxa-009e0601.gslb.pphosted.com. Proofpoint
  • mxb-009e0601.gslb.pphosted.com. Proofpoint
TXT Records
  • linkedin-site-verification=a2db2ff4-484c-49a7-9136-8dec370a3676
  • v=spf1 mx include:spf.protection.outlook.com include:spf-de.emailsignatures365.com include:spf-009e0601.pphosted.com -all
  • 1password-site-verification=4Q3WS2TJPJHVLOJ423D32RUCDQ
  • GMmAYey/S38IHYw2i//DScIm2d/Q4WbXPfoN38XRqiov9DX5J4Pc8KUPxlplkPFNyPHL1NxUGWOpEKzESxDmew==
  • apple-domain-verification=OwVpCQ0QqCYlLQEQ
  • google-site-verification=3uQVgclau-rrJQGAz8cAnzXrxsyEAymYIssCeN4WgOA
  • google-site-verification=A6nKH6jSBuOti1E7IZBYcuJIRlqC_Fqh-LY1pCwI3TQ
Cloud / SaaS Services Detected
Apple Proofpoint

Leak Screenshot:

Leak Screenshot