Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo Perrigo Company

Group: Termite

Discovered by ransomware.live: 2025-03-14

Estimated attack date: 2025-03-14

Country: IE

Description:

Perrigo, founded in 1887 and headquartered in Dublin, Ireland, is a global healthcare supplier and manufacturer of private label over-the-counter pharmaceuticals.


🕵️ Infostealer activity detected by HudsonRock

Compromised Employees: 5

Compromised Users: 8

Third Party Employee Credentials: 8


External Attack Surface: 14


Infostealer Distribution


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domainabuse cscglobal.com
MX Records
  • mxb-00157e01.gslb.pphosted.com.
  • mxa-00157e01.gslb.pphosted.com.
TXT Records
  • MS=ms29398938
  • v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all
  • shopify-verification-code=KLRjMETG4WzD3cI4sYmMypt911RFqC
  • 6niL5fcK4U6TSgcQiZZWMiReLXjREnl1BxWK/X+QkRa3whvbZ66aZY1Qa4hhzBHnvoIfGoXb8VOcmMbCljPexQ==
  • adobe-idp-site-verification=b46dba41-1ed3-414e-bc82-e7bb746ec78c
  • google-site-verification=qpGHWkOAz1EIXcQMsgX23lBrRYyxRuXygV3aH3wvQpI
  • jamf-site-verification=1mXuoKBAyGv3s58MaeLdCA
  • Rmoex6CRjH/gxdWHL6fIJGBC5H/nrkp7m2wCupwHsHGRezexn+p2z2Imc5bbuB6iJbbzOsCUhIzz5OKV3FdyBQ==
  • infor-cloudsuite-domain-verification=BENE4S655GN5QUVVRM4UKNQ2HDWANTQEBZGNRRWYJ28X7UU4NTW55VYTHATCAEAU
  • docusign=935207fd-d55f-4a6c-a87a-fd5dfc3e9667
  • nfp65knbftx0vvgpvpl9gmmhfpdcl2wn
  • 91b26b1477vhhyssplq4ysvm89vjqll9
  • intersight=4c77204ca8df7663a630399919c8bbca4b13c99039f9459e048baaae664eb9ff
  • PPuibJqlsN223pGYJKTqxuAMZg1fJ/xAAwD+mkVr15FXicRh4fJOKL47vCLwO8zpw6fVsOB+BcpQaGNQMXTcVA==
  • xnwwsfc3c45qmx38q5rkmh0ctxy28js3
  • _qa4sc8kef03jzesuzvdid9j3i87v706
  • _ddw3yp59nly46m07hob9zcx1fj34214
  • MDAyMjY0MThwZXJyaWdv
  • apple-domain-verification=8LdopAPsGJGwS4zz
  • Fja4a9w4/nm8BioYlO3lUV9pT8SIkeNmcgDBT/9oIjg=
  • vmware-cloud-verification-7b5fd9b0-0f89-45fe-afe0-13c4c9090574
  • ciscocidomainverification=5aaf94d52cb5dd863f9e8c6af6b91ca583ace8e7c875b650a6a3f111b15b4acb
  • docusign=58580b71-7ddc-4c1e-868d-903088cbce94
Cloud / SaaS Services Detected
Adobe Apple Microsoft 365 JamF DocuSign Proofpoint

Leak Screenshot:

Leak Screenshot