Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

VOLARIS.COM

VOLARIS.COM

Group Clop
Discovered 2023-03-23 12:35 UTC
Est. attack date 2023-03-23

Infostealer activity detected by HudsonRock

Compromised Employees: 17

Compromised Users: 30130

Third Party Employee Credentials: 159


External Attack Surface: 110


Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • 113daf48958cc755ec92d36e6501fbedd8fdb2b1ddde7480245aaced25f0a7c5volaris.com.whoisproxy.org
  • 113daf48958cc755ec92d36e6501fbed57d215876ba817ad6a5143c6f3ee9dffvolaris.com.whoisproxy.org
  • 113daf48958cc755ec92d36e6501fbedaadfd5a6c5be9b6bd2033e75676d59edvolaris.com.whoisproxy.org
  • 113daf48958cc755ec92d36e6501fbed56c5e54c852ff2b33631c500e4b78fc9volaris.com.whoisproxy.org
  • trustandsafetysupport.aws.com
MX Records
  • mxb-00693e01.gslb.pphosted.com. Proofpoint
  • mxa-00693e01.gslb.pphosted.com. Proofpoint
TXT Records
  • anthropic-domain-verification-61ak2z=rl35WBV0FMRccVd90uZR3C5kk
  • 40LFKXK2VN5162POOGH3KBAYULOZGX7EXU0MBU1X
  • v=spf1 ip4:52.201.86.119 ip4:100.24.214.111 ip4:192.161.146.64/28 ip4:198.11.248.123 ip4:169.53.3.154 include:spf.protection.outlook.com include:_spf-dc4.sapsf.com include:spf-00693e01.pphosted.com" " include:mail.zendesk.com include:_spf.atlassian.net include:_spf.psm.knowbe4.com include:_spf.salesforce.com ~all
  • D8895313
  • google-site-verification=Oom5U- DcjpGkxm8LctYvUddSWwitV0lNih99Yu-rtUw
  • google-site-verification=eo_4xwkkDeDsWtl9okTnALQ0ZEkcz0emNzhkTEaEXJM
  • 358822c3cddc4375b2aaa08961519079
  • google-site-verification=ATu5WMd805peZ5nbhSPNOVbM2j3L5wkjROzp7gGR-MU
  • atlassian-sending-domain-verification=cce33b6d-d30d-405a-92c3-146b356742ec
  • atlassian-domain-verification=/dOu4DGVuibXj5Fy9LXRQ2Ov07Tjg4iaQBtAprk87VKmKBPfQtpunvK13fIIDh2z
  • nup1l3k56bsak94k1igtles1gj
  • google-site-verification=TlmyWYe82tRuM_VV0WyCkbf6p9Up-3rCD1atuENs6-E
  • MS=ms30673672
  • google-gws-recovery-domain-verification=40897738
  • XTQS72GWDU9QJ1GFYNP8VPF6S5PUMA0YVGV1QBTF
  • google-site-verification=1LfsowhFmaygpXvwyw7wLCodX8m3cQX-sukyEf9qv_o
Cloud / SaaS Services Detected
Anthropic Atlassian KnowBe4 Microsoft 365 Proofpoint Salesforce Zendesk

Leak Screenshot:

Leak Screenshot