Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks


Group 0mega
Discovered 2022-09-15
Est. attack date 2022-09-15
Country US

Description:

Business services, security software & IT services, risk management software

Infostealer activity detected by HudsonRock

Compromised Employees: 2

Compromised Users: 1

Third Party Employee Credentials: 1


External Attack Surface: 4


Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuse@godaddy.com
MX Records
  • cluster9.us.messagelabs.com.
  • nextlabs-com.mail.protection.outlook.com.
TXT Records
  • anthropic-domain-verification-h465vv=uvTrSeEwc5JwwHRRgqpLkiRMa
  • atlassian-domain-verification=gkuUuvGz+jRk4oQlSsV+P0fNkWgcjPzqDvWSQlTHSOI3DL+zS8pXojoW8e2r2X-u
  • v=spf1 mx ip4:208.185.168.168/32 include:spf.messagelabs.com include:spf.protection.outlook.com include:pb-dynmktg.com include:sent-via.netsuite.com -all
  • msfpkey=be5r9x1gw7p8fvpsorwo3jws
  • apple-domain-verification=qrER02YH8admp3NC
  • msfpkey=58zfi6lfboqsp7yizv65pv6ts
Cloud / SaaS Services Detected
Apple Atlassian