Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

YU.EDU

yu.edu

Group Clop
Discovered 2022-12-22 20:02 UTC
Est. attack date 2022-12-22
Country US

Description:

Home - Yeshiva University

Infostealer activity detected by HudsonRock

Compromised Employees: 36

Compromised Users: 151

Third Party Employee Credentials: 76


External Attack Surface: 97


Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • yu-edu.mail.protection.outlook.com. Microsoft 365
TXT Records
  • dropbox-domain-verification=hbz2ob88sgc9
  • apple-domain-verification=yx2UcJeTQNj9cMLq
  • openai-domain-verification=dv-kET7Mq0rtxt3QSqkVDVfeaA4
  • anthropic-domain-verification-ywkn8y=vvym0SgVyuLzauSIZFa6wwMSi
  • amazonses:Lvl2u9k8/kAKwd1KCze6KKuvjeOwLUVWKOZmPVAFbWM=
  • v=msv1" "t=072D7406-079F-4435-8852-260CCE7E81E7
  • google-site-verification=xwtuuk7vlzEN5E1ovs1-ZK30sN8Sg9AsIvtTMsIttKk
  • SPve7sXfCp5hQLYsXR6wrX2zu2U7fE4DzDjOVIWLel6JY2zRRJ5xananrfDREkpyvaH1rpn0zX4GYmBPXZMFHw==
  • v=spf1 mx ip4:129.98.40.61 ip4:129.98.232.61 ip4:52.45.50.190 ip4:54.146.129.215 include:spf.protection.outlook.com ip4:74.122.104.0/22 -all
  • adobe-idp-site-verification=2b15c396ed7a98397d7bf5b97544f289c67e0805bf82234158142f630eedc48d
Cloud / SaaS Services Detected
Adobe Amazon SES/WorkMail Anthropic Apple Box Dropbox OpenIA

Leak Screenshot:

Leak Screenshot