Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks


Group Qilin
Discovered 2026-07-23 04:28 UTC
Est. attack date 2026-07-23
Country MY

Description:

N/A

Infostealer activity detected by HudsonRock

Compromised Employees: 63

Compromised Users: 509

Third Party Employee Credentials: 142


External Attack Surface: 128


Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuseilovewww.com
MX Records
  • sunway-com-my.in.tmes-sg.trendmicro.com.
TXT Records
  • klaviyo-site-verification=XFCq3f
  • amazonses:M3qzZPbxA4fs422RcXw4nZjTKFcRwakJDlgZ9IJ5ZF0=
  • anthropic-domain-verification-m8s69f=Ixra7iuBBIzS9JTj1nvNUCnu9
  • hpe-greenlake-domain-verification=333937735a44664436494d79584b39426251647965367a664f34734c63314c4b
  • anthropic-domain-verification-zgjmvn=yusDiDRQcUI2dTKCsCOWbcb22
  • tmes=bdf5a01e17019b4630ef6f9df3c6cf22
  • amazonses:WHc77vv44mFyqpQjwNXxEBfjdQc5pIj8k5X5YbTk23A=
  • google-site-verification=-E2XaLLD4wrkpIulhgfSrqkvTZr742GNJB766m5DC8U
  • MS=ms40593071
  • amazonses:0NOya8zH3zEh6Yi/xDHvh6fEXVFqGUgIH1CWxSaLhOw=
  • work-os-domain-verification-b7aha3=aXE4BQ6YuDH2vIXDXjvt4ERO1
  • _1ez47sg8ee3n010565lltk3lv208apj
  • google-site-verification=IJuGdlZIqRjwRlCuoV9WbVbN0CG7ZALHitXgU_fsRGI
  • google-site-verification=UkycwdQKON4mycv89wT6sKlXpEPJx5T0i9bfDzUb8Y
  • v=spf1 include:spf.protection.outlook.com include:sendgrid.net ip4:203.115.203.153 ip4:103.153.87.153 ip4:113.23.138.157 ip4:103.153.87.170 include:spfgbmc.sunway.com.my include:_spf.elasticemail.com a:smtpmail.sunwaylagoon.com include:spf.tmes.trendmicro" ".com ~all
  • cursor-domain-verification-q4cvky=fF2rnCVzS5euw7Xyt0PpPyPQF
Cloud / SaaS Services Detected
Amazon SES/WorkMail Anthropic Microsoft 365 SendGrid TrendMicro

Leak Screenshot:

Leak Screenshot