Buy Me a Coffee

Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo West Lothian Council

Group: interlock

Discovered by ransomware.live: 2025-05-23

Estimated attack date: 2025-04-30

Country: GB

Description:

West Lothian Council oversees operations of the West Lothian area in Scottland. The council provides guidance for school, local legislature and economic programs.

🕵️ Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 36

Third Party Employee Credentials: 1

External Attack Surface: 15

Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • mx5.westlothian.gov.uk.
  • mx3.westlothian.gov.uk.
  • mx1.westlothian.gov.uk.
TXT Records
  • google-site-verification=xJoL_rOyWgMB1sZvXuTTScwa4mTzTdhxTxAhvtvljow
  • selector1-hwrc.westlothian.gov.uk._domainkey.servicebuilder.co.uk.
  • selector2-hwrc.westlothian.gov.uk._domainkey.servicebuilder.co.uk.
  • v=spf1 ip4:193.63.72.234 ip4:193.63.72.240 ip4:194.80.23.70 ip4:35.176.151.182 ip4:193.63.72.212 ip4:193.63.72.213 ip4:193.63.72.214 ip4:212.104.154.110 include:amazonses.com include:spf.protection.outlook.com -all
  • amazonses:84Z3XyCDZVreX5a4lhclbctsESQ+1BW1FH0cmmvEKSc=
  • apple-domain-verification=qgwNDjUxboT9mg9R
Cloud / SaaS Services Detected
Apple Amazon SES/WorkMail

Leak Screenshot:

Leak Screenshot