Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

RACETRAC.COM

racetrac.com

Group Clop
Discovered 2022-12-22 20:02 UTC
Est. attack date 2022-12-22

Description:

RaceTrac - Whatever Gets You Going

Infostealer activity detected by HudsonRock

Compromised Employees: 3

Compromised Users: 428

Third Party Employee Credentials: 47


External Attack Surface: 20


Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abusename.com
MX Records
  • mxa-00188801.gslb.pphosted.com. Proofpoint
  • mxb-00188801.gslb.pphosted.com. Proofpoint
TXT Records
  • openai-domain-verification=dv-7JCKgicFGKWuUnqNRZZzkR0s
  • facebook-domain-verification=c82q7wgokd32wm4gzon6x78opk4ise
  • postman-domain-verification=81af170d0b973368d0a4ec07bab30c929473897d3ffe921b6555f51b3af001a810a609eb33d40590db9f81c04536b029c891988eb3a33c344ff7582c956f0ccf
  • MS=ms96972836
  • 09yd2028p5x8ds8yq5q3j9tkkt1lc6zl
  • adobe-idp-site-verification=da68c00771d1c50cbdc10a0422a4bee103781b4033417ed464039064acf27ecd
  • box-domain-verification=f2d9119a06e565df824b8232c0855194f2784051e48ab25a7ce9c5e7b2b67c07
  • _bqq50wi05gaypomi711hoh4is4f5srm
  • hibp-verify=dweb_724m95fxhsvhjz2bve2jrqkw
  • yvr265bc2jm5qm38dddfkdph2lsqlwln
  • smartsheet-site-validation=ZvZ1svmjdq0bae0P83b9NZbyfJSMT_nn
  • cisco-ci-domain-verification=2c14392880735c1c7c4927b11ec0eea65e8ca3ba252c5ac736a3d9853c5a390
  • 5504c95db18a033f6695af5c20788bb970cc1d8a27dad09cbe3aa8b5d5afa7b7
  • _umaudtbu1vasm78a0a7kwswwt5bb08a
  • 3xjwcb4bnkrjj83mxftln2xr1sgrqtrk
  • Dynatrace-site-verification=ff68cdea-3d0b-4d81-a422-0b0d90a344cf__nd04af48a6dl0729cgsn3fibae
  • teamviewer-sso-verification=ba15358983e6410e963d7127ce3298aa
  • rtwebappprod.azurewebsites.net
  • njdjcbvt4h6skgn9745dpzq2jkkmp3bd
  • v=spf1 a mx ip4:198.21.2.183/32 ip4:198.54.82.36 ip4:198.54.82.37 ip4:198.54.82.38 ip4:149.72.231.47 ip4:149.72.196.66 include:spf-00188801.pphosted.com include:_spf.qp-mail.com include:spf.protection.outlook.com ~all
  • anthropic-domain-verification-cgxk6v=D4yWsh94gJO6ssIC6hivYBE8J
  • apple-domain-verification=gZx8inhcVuY4enM4
  • globalsign-domain-verification=A81D7EFF87A0014A03AA920198B7252D
  • google-site-verification=Qm9NH6EkQkcJFxmxPfxjfbXnIy0l_cw6vVvC1oyAF4Y
Cloud / SaaS Services Detected
Adobe Anthropic Apple Box Cisco Microsoft 365 OpenIA Postman Proofpoint Smartsheet Teamviewer

Leak Screenshot:

Leak Screenshot