Verhelst
Verhelst
Group: cactus
Discovered by ransomware.live: 2023-11-21
Estimated attack date: 2023-11-21
Description:
From shell construction to recycling of construction waste. From asphalt production to sand mining. From asbestos removal to soil remediation. Verhelst Group is a total partner for professional construction projects. A construction group with a unique approach and extensive construction expertise.
🕵️ Infostealer activity detected by HudsonRock
Compromised Employees: 0
Compromised Users: 11
Third Party Employee Credentials: 4
External Attack Surface: 6
DNS Records:
The following DNS records were found for the victim's domain.
WHOIS Emails
- No emails found.
MX Records
- verhelst-be.mail.protection.outlook.com.
TXT Records
- atlassian-sending-domain-verification=3eae1f9d-c632-48af-babe-d0c450fa273c
- MS=ms38772227
- _globalsign-domain-verification=55RrzgwKoeic8RUQrxE7gjI5BKS4jXrvjwqQdrGhun
- atlassian-domain-verification=MFPUpjammmlKD2I9saOXPcwlO/g1FYUJdGrcirYzMoTaaGLH5tagBnwxzgR9ecQV
- MS=ms36897101
- pinterest-site-verification=4cff8f8a5f153555acb90932e3a2287b
- v=spf1 include:spf.flexmail.eu ip4:81.246.76.180 ip4:86.39.65.9 ip4:86.39.66.57 ip4:82.143.93.234 ip6:2a00:6ec0:101:1:0:9:0:1 include:spf.mailjet.com include:spf.protection.outlook.com include:spf.icontroller.eu a:verhelst.doubledime.eu include:spf.mandri" "llapp.com include:spf.organi-orng.be include:amazonses.com -all
- v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrLHiExVd55zd/IQ/J/mRwSRMAocV/hMB3jXwaHH36d9NaVynQFYV8NaWi69c1veUtRzGt7yAioXqLj7Z4TeEUoOLgrKsn8YnckGs9i3B3tVFB+Ch/4mPhXWiNfNdynHWBcPcbJ8kjEQ2U8y78dHZj1YeRXXVvWob2OaKynO8/lQIDAQAB;
- 25dqr5UqC81BbEaoSaw96uOOmMtpRhE1PpTZVVjlgOIeXeK6DHLxtGvV0wIa/ryQFY8zlk0df11m+dxgT2MvDg==
- spf2.0/pra include:spf.flexmail.eu ?all
Cloud / SaaS Services Detected
Atlassian
Amazon SES/WorkMail
Microsoft 365
Mailjet