Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo SNS SYSTEM

Group: killsec

Discovered by ransomware.live: 2025-05-05

Estimated attack date: 2025-05-05

Country: IN

Description:

N/A


🕵️ Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 3

Third Party Employee Credentials: 2


External Attack Surface: 18


Infostealer Distribution


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuse godaddy.com
MX Records
  • aspmx3.googlemail.com.
  • alt2.aspmx.l.google.com.
  • aspmx.l.google.com.
  • alt1.aspmx.l.google.com.
  • aspmx2.googlemail.com.
TXT Records
  • MS=ms76458690
  • _globalsign-domain-verification=kL-zxMb48I3_CU53_XGjdvAg3G_e6P5LoVH-LQzbW4
  • _globalsign-domain-verification=LBDqPRBe7oDVHjrG12q-2ggEwrerZAEGXxxwa4mI5k
  • _globalsign-domain-verification=uCxArm0RhOvselcib1fEwMXD3_km23-6ZXvk0cVfuz
  • MS=7EFDB63FE50CF6864B28E6EB139778CE7B238B63
  • google-site-verification=MEurgVr3r0u42Xfd8b4wzp9pmpe-hE6erNobJQxRtVM
  • zoho-verification=zb50597427.zmverify.zoho.com
  • v=spf1 include:zcsend.net include:usermail.zohocreator.com include:zcsend.net include:spf.mailjet.com include:_spf.google.com ip4:128.199.116.242/32 v=spf1 include:one.zoho.com -all
Cloud / SaaS Services Detected
Microsoft 365 Zoho Campaigns Mailjet

Leak Screenshot:

Leak Screenshot