Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo cisd.org

Group: ransomhub

Discovered by ransomware.live: 2025-03-24

Estimated attack date: 2025-03-24

Country: US

Description:

[AI generated] N/A


🕵️ Infostealer activity detected by HudsonRock

Compromised Employees: 12

Compromised Users: 1

Third Party Employee Credentials: 5


External Attack Surface: 12


Infostealer Distribution


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuse godaddy.com
MX Records
  • cisd-org.mail.protection.outlook.com.
TXT Records
  • @
  • v=spf1 a mx ip4:38.147.98.0/24 ip4:98.97.248.0/21 ip4:162.247.216.0/22 ip4:66.195.143.26 ip4:8.12.72.20 redirect=_spf.mail.yahoo.com include:_spf.google.com include:spf.protection.outlook.com include:customerspf.schoolmessenger.com include:spf.schoolwires" ".net include:spf.gaggle.net -all
  • google-gws-recovery-domain-verification=55680211
  • google-gws-recovery-domain-verification=58461137
  • adobe-idp-site-verification=71276a9a1be7c2c19e8a13e2c5525f33265cc4c29214918eae5588653be90229adobe-idp-site-verification=71276a9a1be7c2c19e8a13e2c5525f33265cc4c29214918eae5588653be90229
  • 7ln2d5au7e7o1k3s4ag0fbrb0f
  • google-site-verification=3H2p5JtdJCziG07wEe1PI_eE9j-lXIKFXDHRM91njMc
  • MS=ms66567453
Cloud / SaaS Services Detected
Adobe Microsoft 365

Leak Screenshot:

Leak Screenshot