Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks


Group Rhysida
Discovered 2025-10-21 18:37 UTC
Est. attack date 2025-10-21
Country CA

Description:

Peraso

Infostealer activity detected by HudsonRock

Compromised Employees: 6

Compromised Users: 0

Third Party Employee Credentials: 6


External Attack Surface: 8


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • b282fb94d795b8da1361b2a99d69393a1f445d1ffb0b9f8344358a89eaf34c4bperasotech.com.whoisproxy.org
  • b282fb94d795b8da1361b2a99d69393a1157aa956d211e99fc9f002ea4c3da84perasotech.com.whoisproxy.org
  • trustandsafetysupport.aws.com
  • b282fb94d795b8da1361b2a99d69393a39fdf8969c0fb69ce0538ba84b72e958perasotech.com.whoisproxy.org
  • b282fb94d795b8da1361b2a99d69393acfdf34a5a2fcbe0b5f8620c8e1be9872perasotech.com.whoisproxy.org
MX Records
  • perasotech-com.mail.protection.outlook.com. Microsoft 365
TXT Records
  • atlassian-domain-verification=a2OY29+xQHOULqDGxdJ6NrzTbJBbgw5PZasETUJC7OOU8OketPO1S8zyZOMUryIo
  • g6uL9ss7kOBbCvQAex7DIXiaJSxhXr
  • v=spf1 ip4:206.223.176.122 include:spf.protection.outlook.com -all
  • zoho-verification=zb60819772.zmverify.zoho.com
  • 1password-site-verification=V4XGDBVWR5BADMSHP32TPSETQY
Cloud / SaaS Services Detected
Atlassian Zoho Campaigns