Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

SIUMED.EDU

siumed.edu

Group Clop
Discovered 2022-12-22 20:02 UTC
Est. attack date 2022-12-22
Country US

Description:

SIU School of Medicine Home - SIU School of Medicine

Infostealer activity detected by HudsonRock

Compromised Employees: 10

Compromised Users: 1

Third Party Employee Credentials: 5


External Attack Surface: 18


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • mx1.siumed.edu.
  • mx2.siumed.edu.
TXT Records
  • _zvwvrqalj3qgmcn06j87foz3db0lwqp
  • adobe-idp-site-verification=8e699fe7391a61d469bd007a3295c397905fb566b98db27d355d3483eac0a86e
  • v=spf1 ip4:131.230.224.0/23 ip4:131.230.49.128/27 include:res.cisco.com include:spf.constantcontact.com include:u1759653.wl154.sendgrid.net include:_spf.academicworks.com ip4:74.209.228.11 ip4:74.209.228.12/31 ip4:167.89.81.19 -all
  • cisco-ci-domain-verification=7415e99c423853d19d15f73219877ea14a0ce40f7bb44d0e75e3bbd1b6b85169
  • google-site-verification=Tot4nR8FUp-UPi_hMARf2HXx1xxpvPX_4mVNi2QhcGg
  • atlassian-sending-domain-verification=5eb3e860-b28a-49f2-9dbb-12fba38e3109
  • 1password-site-verification=SQHXI6YZQVG6DKOKDSD7R47KGU
  • 9b975775-f64c-4a91-a611-2ac603106504
  • atlassian-domain-verification=mGAkBWlqDkz3Rcwa6qvCREfXszuAtAOiDdu31ep5CfSaX3NHB6lznVKm2ZdU16tO
  • _n6m2afl4tclyisrvclbf6hvd3boi4se
  • openai-domain-verification=dv-3jLgkFvUGv4QxwQEgDQQUCGB
  • google-site-verification=aeGY-Jv97hBClqJLtQ2By5zkHAyIxbLoysVDYaPISc8
  • smartsheet-site-validation=GriQRsMGaFIAt3Qi-Rkb549JGckSukkM
  • linkedin-site-verification=cbc31b99-e634-4b6a-ab82-77127beae6b4
  • intersight=60f01f2c370944e371b553a422ea4465fd3b113119fa2a904aca6049545f6968
  • ZA=fMMjy8cX5dvLRlQK9dRAog==
  • ZOOM_verify_VFSqpIaxTuOoTK-y7GXYuw
  • dropbox-domain-verification=r9gw08d1286f
  • facebook-domain-verification=0d2pjdhjk1733s5d3dz00m04vhcvkf
Cloud / SaaS Services Detected
Adobe Atlassian Box Cisco Dropbox OpenIA SendGrid Smartsheet Zoom

Leak Screenshot:

Leak Screenshot