Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo chmsbc.org.br

Group: Lockbit5

Discovered by ransomware.live: 2025-12-07

Estimated attack date: 2025-12-06

Country: BR

Description:

Complexo Hospitalar O Complexo Hospitalar de São Bernardo do Campo é formado pelo Hospital de Clínic...


🕵️ Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 119

Third Party Employee Credentials: 3


External Attack Surface: 5


Infostealer Distribution


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • infra.ti chmsbc.org.br
  • cert cert.br
  • mail-abuse cert.br
MX Records
  • chmsbc-org-br.mail.protection.outlook.com.
TXT Records
  • v=spf1 ip4:201.72.232.50 ip4:179.184.234.130 include:_spf.google.com include:spf.protection.outlook.com -all
  • MS=ms48293851
  • google-site-verification=qANOum4m_SF2OY_Hg9AWFKcztZbg_THVdMKShEzM8dE
Cloud / SaaS Services Detected
Microsoft 365

Leak Screenshot:

Leak Screenshot