Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

SWIRESPO.COM

swirespo.com

Group Clop
Discovered 2022-12-22 20:02 UTC
Est. attack date 2022-12-22

Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 6

Third Party Employee Credentials: 1


External Attack Surface: 4


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain.operationsweb.com
MX Records
  • mxa-002f3801.gslb.pphosted.com. Proofpoint
  • mxb-002f3801.gslb.pphosted.com. Proofpoint
TXT Records
  • knowbe4-site-verification=6ff6bb5e0b4068a89211bfab1fbe062b
  • v=spf1 ip4:210.80.140.141/30 ip4:116.12.176.2/30 ip4:203.126.220.149/30 ip4:20.3.179.83 ip4:20.236.28.252 include:spf.protection.outlook.com include:usermail.zohocreator.com include:spf_c.oraclecloud.com ~all
Cloud / SaaS Services Detected
KnowBe4 Oracle Cloud Proofpoint

Leak Screenshot:

Leak Screenshot