Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

PROMINENT.COM

prominent.com

Group Clop
Discovered 2022-12-22 20:02 UTC
Est. attack date 2022-12-22

Description:

Experts in Metering Technology and Water Treatment - ProMinent

Infostealer activity detected by HudsonRock

Compromised Employees: 11

Compromised Users: 10

Third Party Employee Credentials: 12


External Attack Surface: 7


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • infodomain-contact.org
  • abuse1api.net
MX Records
  • mx-02-eu-central-1.prod.hydra.sophos.com.
  • mx-01-eu-central-1.prod.hydra.sophos.com.
TXT Records
  • k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDGoQCNwAQdJBy23MrShs1EuHqK/dtDC33QrTqgWd9CJmtM3CK2ZiTYugkhcxnkEtGbzg+IJqcDRNkZHyoRezTf6QbinBB2dbyANEuwKI5DVRBFowQOj9zvM3IvxAEboMlb0szUjAoML94HOkKuGuCkdZ1gbVEi3GcVwrIQphal1QIDAQAB;
  • autodesk-domain-verification=awHASkHPvfI9GkBTe_pn
  • sophos-domain-verification=7c8b5c51ac71cb148897301216814f1f427777255ef3a704e6682c60408af758
  • 3C7k1jKxWzXWKWtmG0GLkTzsHO57Ghr6fAb41npoWEax3qhuUMEV91IxfhaPVU50WywVkExacysNVP8g/2PjXg==
  • zoho-verification=zb40097902.zmverify.zoho.com
  • sending_domain175502=7d71247981bcd0b1472e21db938c81376936cb418c97dc8e2d32c19db" "e05d417
  • zoho-verification=zb11543798.zmverify.zoho.com
  • adobe-idp-site-verification=306cafbc2654958dba2f7ab07622ad8ae1d7fd8d51f3937ad2809769cf8fd19f
  • v=spf1 ip4:195.248.252.0/24 ip4:216.221.160.222 ip4:216.221.160.223 ip4:76.223.148.235 ip4:213.95.36.154 ip4:54.240.51.52 ip4:54.240.51.53 include:_spf_eucentral1.prod.hydra.sophos.com" " include:et._spf.pardot.com include:spf-de.emailsignatures365.com include:postimessaging.net include:turbo-smtp.com include:smtp.streamail.co.nz include:146029420.spf08.hubspotemail.net -all
  • QuoVadis=3589a624-c767-4c1f-bad5-37c8cdf9a4e0
  • sophos-domain-verification=191b71420ee06964509c0e0d751e5aea2703cb91
  • t/k39+yGPWc92gKqoVkEXLcQ0Z1QekS/Zl3A9yzFrwm33Ls2CeywB37Wzz4WaEKPtiMZCAF8NBvNVgbCECDOgw==
  • pardot1008712=2514adf5a8d775287d33479eb37d83ea67fd2f8a71f12fef18c19d6a94b156bb
  • MS=ms86576849
  • sending_domain175502=7d71247981bcd0b1472e21db938c81376936cb418c97dc8e2d32c19dbe05d417
  • mindmanager-verification=55447c2bcf46a1568b0ee49bd04720b79dd4432f5f65d6e61af72faeeb683e40
  • sending_domain1008712=6f54b6123b2ca540b930bd3825d75276762111282ff23f9205d28b50f6ff91d0
  • airalo-domain-verification=MKvm82DzP0e0FSu
Cloud / SaaS Services Detected
Adobe Autodesk HubSpot Microsoft 365 Salesforce Sophos Zoho Campaigns

Leak Screenshot:

Leak Screenshot