Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

UNIVERSITYOFCALIFORNIA.EDU

universityofcalifornia.edu

Group Clop
Discovered 2022-12-22 20:02 UTC
Est. attack date 2022-12-22
Country US

Description:

Home - University of California

Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 7812

Third Party Employee Credentials: 7


External Attack Surface: 100


Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • universityofcalifornia-edu.mail.protection.outlook.com. Microsoft 365
TXT Records
  • fastly-domain-delegation-boasohhek9v7kpwjaxvt-784148-2025-04-12
  • yahoo-verification-key=qvMDv6IyqVkoZW7eZkqt7/6axGyWvmJxCB30w4TzNzs=
  • 2B41DD75B5F7530F7FFFAD33C41ED9EB
  • F6D376EDE2E207202754699B3343A592
  • v=spf1 ip4:44.235.59.76 ip4:54.203.115.92 ip4:69.169.239.14/31 ip4:128.48.73.180 ip4:128.48.73.184 ip4:34.216.190.101 ip4:199.59.200.201 include:spf.protection.outlook.com include:_spf.salesforce.com -all
  • MS=ms28421482
  • google-site-verification=oUy63GM9Oe5_0-j680qkkKk8gLrj0er5ik5cjdZqR1Q
  • dtm-domain-verification=hveVvCa5PwcWYIJldB1Rc7XMhWbLnsTnw8o0qZWbcKk
  • dtm-domain-verification=beiZoAjZdDzobf790_uQDxdwUQLErDhuD6qVxJPI7Nw
Cloud / SaaS Services Detected
Microsoft 365 Salesforce

Leak Screenshot:

Leak Screenshot