Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Logo Philippine Savings Bank (Metrobank Group)

Group: Qilin

Discovered by ransomware.live: 2026-01-28

Estimated attack date: 2026-01-28

Country: PH

Description:

N/A


🕵️ Infostealer activity detected by HudsonRock

Compromised Employees: 7

Compromised Users: 187

Third Party Employee Credentials: 15


External Attack Surface: 25


Infostealer Distribution


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • mx1.psbank.com.ph.
  • mx2.psbank.com.ph.
TXT Records
  • 5A7D-1A9B-5996-063E-3F33-D465-2CC9-E538
  • 7b51de782d6341c28313c92081192100
  • 9c5430ce60a847b78e1c706ce89b3b6d
  • google-site-verification=8WQDP7xM66fbZJ8nItR_qG0FQW0mKQawdTgEgAWxIqA
  • v=spf1 mx a -all
Cloud / SaaS Services Detected
No well-known cloud or SaaS service detected.

Leak Screenshot:

Leak Screenshot