Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks


Discovered 2023-03-08 02:39 UTC
Est. attack date 2023-03-08

Description:

Since 1976, Wagner has been selling and renting quality Cat machines used in heavy construction, building construction, mining, waste handling, paving, municipal and governmental applications, forestry and more.

Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 0

Third Party Employee Credentials: 1


External Attack Surface: 0


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abusegodaddy.com
MX Records
  • d172169b.ess.barracudanetworks.com. Barracuda
  • d172169a.ess.barracudanetworks.com. Barracuda
TXT Records
  • cisco-ci-domain-verification=5ca346397f3d2e4368e981568ed497c181ee84c4d3325420c61a553fd680e838
  • tbvmf1vl5rdardb6tsbil6o82g
  • docusign=248d0f5c-7484-464a-bb74-9f976a8fac07
  • v=spf1 include:spf.ess.barracudanetworks.com ip4:35.80.141.6 ip4:44.229.121.55 ip4:208.185.229.45 ip4:135.84.68.123 ip4:67.231.157.188 ip4:35.80.141.6 ip4:44.229.121.55 ip4:148.59.100.16/28 ip4:35.174.145.124 ip4:34.199.176.180 ip4:149.72.88.217 ip4:148.5" "9.100.16/28 include:21476373.spf03.hubspotemail.net include:u7903245.wl246.sendgrid.net include:sendgrid.net -all
  • duo_sso_verification=J2tWurD3jQNEJ50xWu7PamnvRfOrtkPiqXCVZipwROKS6bCgsUSwewK1v7Df0mYP
Cloud / SaaS Services Detected
HubSpot Cisco SendGrid Cisco Duo DocuSign