Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo Secretaria de Educacion de Veracruz, SEV

Group: nightspire

Discovered by ransomware.live: 2025-04-13

Estimated attack date: 2025-04-01

Country: MX

Data exfiltrated: 82 GB

Description:

Secretaria de Educacion de Veracruz, SEV(Mexico)


🕵️ Infostealer activity detected by HudsonRock

Compromised Employees: 6

Compromised Users: 6033

Third Party Employee Credentials: 1


External Attack Surface: 102


Infostealer Distribution


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • sev-gob-mx.mail.protection.outlook.com.
TXT Records
  • opr7n297fqkg66f9311qr56avu
  • MS=ms88978909
  • v=spf1 include:spf.protection.outlook.com -all
Cloud / SaaS Services Detected
Microsoft 365