Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo TBMCG.com

Group: ElDorado

Discovered by ransomware.live: 2024-06-06

Estimated attack date: 2023-12-04

Country: US

Description:

... Tags: #TBM #Consulting Group #United States



DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain.operations web.com
MX Records
  • tbmcg.com.2.0001.arsmtp.com.
  • tbmcg.com.1.0001.arsmtp.com.
TXT Records
  • n1shc6li03cdoa4nqpv2elohfh
  • s8qub3scp8cgb9eihlhnsg32t7
  • FcWOrHzeIZtAzxiXoCtUAQ/EqaZBEur/V+uF6/+ZatPEAGXHb0h4XetxPf79maCjHgCJrOK9q2XpsoVNWrIZ2Q==
  • v=spf1 include:appriver.com include:spf.protection.outlook.com include:et._spf.pardot.com include:edgepilot.com ip4:209.34.224.212 ip4:209.34.224.214 ip4:209.34.224.222 ip4:206.127.29.192/26 ip4:8.31.233.159 include:_spf.salesforce.com -all
  • ajep7368fee1n3sefum1747csj
Cloud / SaaS Services Detected
Salesforce

Leak Screenshot:

Leak Screenshot