Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Logo North Kitsap School District

Group: Nightspire

Discovered by ransomware.live: 2025-05-09

Estimated attack date: 2025-05-06

Country: US

Data exfiltrated: 20MB

Description:

North Kitsap School District (USA)


🕵️ Infostealer activity detected by HudsonRock

Compromised Employees: 26

Compromised Users: 3

Third Party Employee Credentials: 43


External Attack Surface: 6


Infostealer Distribution


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuse@godaddy.com
MX Records
  • smtp.google.com.
TXT Records
  • ZOOM_verify_z8mZIL4MTNiZT8aIbkcwQQ
  • adobe-idp-site-verification=3ea5691b93d86f564030a7a21f054956aea196c6ef7144e03a2b076cf0b053e0
  • google-site-verification=FIxTaYKi8Wkr3dPT3lFU0LdNy8sVWa4luUE09Q-ro8k
  • bw=mOE/ynD+WQTtYuWqhoPUDMH9bVB226q+v1GUmIvx5u/N
  • 554RGVEcpLWOOWDz8pqC6ETtPWlcp/6h0a8y+ynPDUkYVIQql52pQSJkB1hRsaNoftdBxg06QPRHtn7QkBQABQ==
  • MS=ms31110562
  • intersight=0f2421ab8564d4c21735f1b77dd3dc213b3926abdb65fe5d330b642ef7739b2d
  • google-site-verification=uZatqj4zFGNtbyc4w2eO3t7MTNVPYvLfLcDLM-pXwbw
  • v=spf1 ip4:152.157.188.5 ip4:152.157.6.0/24 include:_spf.google.com include:spf.protection.outlook.com ~all
  • google-site-verification=s6d7bSTd84BrtnxLTCVewTLczMpFJDtF3fBZc0Juqdg
Cloud / SaaS Services Detected
Adobe Microsoft 365 Zoom