Buy Me a Coffee

Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo SERCIDE

Group: alphv

Discovered by ransomware.live: 2024-02-12

Estimated attack date: 2024-02-12

Country: ES

Description:

CIDE has representation in around 600 municipalities distributed throughout Spain, 75% of them with a population of less than 5,000 inhabitants. CIDE - Association of Electrical Energy Distributors.

🕵️ Infostealer activity detected by HudsonRock

Compromised Employees: 1

Compromised Users: 9

Third Party Employee Credentials: 0

External Attack Surface: 12


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuse nicline.com
MX Records
  • sercide-com.mail.protection.outlook.com.
TXT Records
  • 2021040614353317tf2fcb0zy2dyv8f9nfmytnkeus9l92nkfabx44yrtv9z3fq7
  • google-site-verification=UyXJ_yvJa1J8hMaoFZXqFmG-5HEXDpV2Byib2I6VtlE
  • atlassian-domain-verification=OeKjLXxxALo4waisEQlzbn8WwzHjH7SqMFOd7D1BX5WqmvosTrxNG1HaS5pY34Vr
  • MS=ms66142459
  • 202304080956310ly38c321uabawso7fycbsqvkraumcv4nf7jb7x4oqfo0n4wwd
  • duo_sso_verification=k7y3k7PSUCx53JwNjRPzum9Jl2XthCm53pqQzQFPFWvPY16d0V8rZ1amh2nHcTzA
  • 20230314132657127gye0d7o4e0czbl1llhesw5nqs640f4etjrlr1brqsdngwtz
  • MS=ms22036096
  • v=spf1 include:spf.protection.outlook.com -all
Cloud / SaaS Services Detected
Atlassian Microsoft 365 Cisco Duo

Leak Screenshot:

Leak Screenshot