Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

corahperu.org

corahperu.org

Group Apt73
Discovered 2026-04-27
Est. attack date 2026-04-27
Country PE

Description:

corahperu.org is the official website of Proyecto Especial CORAH, a Peruvian government project a...

Infostealer activity detected by HudsonRock

Compromised Employees: 24

Compromised Users: 24

Third Party Employee Credentials: 6


External Attack Surface: 16


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain.operations@web.com
MX Records
  • mail.corahperu.org.
TXT Records
  • google-site-verification=8VY-q-dYz5tlncsoV4Id9hww4x4BgVJRfSdhRjxdguA
  • v=spf1 ip4:161.132.241.195 -all
  • MS=636773767B761BC093213E10C7576DB9D7737AC6
Cloud / SaaS Services Detected
No well-known cloud or SaaS service detected.

Leak Screenshot:

Leak Screenshot