Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

VOLARIS.COM

VOLARIS.COM

Group Clop
Discovered 2023-03-23 12:35 UTC
Est. attack date 2023-03-23

Infostealer activity detected by HudsonRock

Compromised Employees: 17

Compromised Users: 30130

Third Party Employee Credentials: 159


External Attack Surface: 110


Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • ac0edb5d71ff7d89e37522ca4b5a7870a8e87c496d3e5c45732d640d82e9b7advolaris.com.whoisproxy.org
  • ac0edb5d71ff7d89e37522ca4b5a787085a1af9f80309ffdd72e9baa6b2b21bavolaris.com.whoisproxy.org
  • trustandsafetysupport.aws.com
  • ac0edb5d71ff7d89e37522ca4b5a78701284d2620c6eb8634619ba099928ba29volaris.com.whoisproxy.org
  • ac0edb5d71ff7d89e37522ca4b5a78704ecb9d789103db4030e76f79098d8fc3volaris.com.whoisproxy.org
MX Records
  • mxb-00693e01.gslb.pphosted.com. Proofpoint
  • mxa-00693e01.gslb.pphosted.com. Proofpoint
TXT Records
  • google-site-verification=TlmyWYe82tRuM_VV0WyCkbf6p9Up-3rCD1atuENs6-E
  • atlassian-domain-verification=/dOu4DGVuibXj5Fy9LXRQ2Ov07Tjg4iaQBtAprk87VKmKBPfQtpunvK13fIIDh2z
  • google-gws-recovery-domain-verification=40897738
  • MS=ms30673672
  • google-site-verification=ATu5WMd805peZ5nbhSPNOVbM2j3L5wkjROzp7gGR-MU
  • anthropic-domain-verification-61ak2z=rl35WBV0FMRccVd90uZR3C5kk
  • XTQS72GWDU9QJ1GFYNP8VPF6S5PUMA0YVGV1QBTF
  • atlassian-sending-domain-verification=cce33b6d-d30d-405a-92c3-146b356742ec
  • 358822c3cddc4375b2aaa08961519079
  • google-site-verification=1LfsowhFmaygpXvwyw7wLCodX8m3cQX-sukyEf9qv_o
  • google-site-verification=eo_4xwkkDeDsWtl9okTnALQ0ZEkcz0emNzhkTEaEXJM
  • google-site-verification=Oom5U- DcjpGkxm8LctYvUddSWwitV0lNih99Yu-rtUw
  • v=spf1 ip4:52.201.86.119 ip4:100.24.214.111 ip4:192.161.146.64/28 ip4:198.11.248.123 ip4:169.53.3.154 include:spf.protection.outlook.com include:_spf-dc4.sapsf.com include:spf-00693e01.pphosted.com" " include:mail.zendesk.com include:_spf.atlassian.net include:_spf.psm.knowbe4.com include:_spf.salesforce.com ~all
  • D8895313
  • 40LFKXK2VN5162POOGH3KBAYULOZGX7EXU0MBU1X
  • nup1l3k56bsak94k1igtles1gj
Cloud / SaaS Services Detected
Anthropic Atlassian KnowBe4 Microsoft 365 Proofpoint Salesforce Zendesk

Leak Screenshot:

Leak Screenshot