Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

cxm.com

cxm.com

Discovered 2024-02-04
Est. attack date 2024-02-04
Country US

Description:

Chicago Extruded MetalsFinance (budget, audit, cash flow, balance sheet, tax returns, project calculations, YTD reports, bank statements and many other financial documents) Employees (personal data of employees, contracts, information on salaries,...

Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 1

Third Party Employee Credentials: 1


External Attack Surface: 0


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • e7e1807e-1f8a-459f-a94b-7f224bb41a39@identity-protect.org
  • trustandsafety@support.aws.com
MX Records
  • cxm-com.mail.protection.outlook.com.
TXT Records
  • linkedin-site-verification=58e5e8a3-f9b2-4dab-9647-69cc1f493c83
  • openai-domain-verification=dv-Gfo7IEMsOTx8agBqghvwBedK
  • slack-domain-verification=1woJLit1hrNPfhxmRz2V0y3XDFCOkoEGGlOWH3ZQ
  • v=spf1 include:spf.protection.outlook.com include:one.zoho.com -all
  • zoho-verification=zb40071595.zmverify.zoho.com
  • MS=ms82539711
  • TAILSCALE-XVqrtl0wY6NqZOPRlSGf
  • anthropic-domain-verification-py32jt=HFiqEJrQkA5nh0zEEib6DQzvd
  • docusign=f8b8b1eb-86c8-42a9-9532-98c0d2ebf69b
  • google-site-verification=98cIxCSaAj-gZbojnvLyBHT6wSW_G7dkjpMIKByHDU4
  • google-site-verification=t6JaRyMJ9OIyhNVb-6Q3wlA0qOC4Nxmj7J8MkLCo3FQ
  • hcp-domain-verification=878bd0a3cf88f1edd25f9de4b44b130168af4ca89b3a986a4a5903eb19611c10
Cloud / SaaS Services Detected
Microsoft 365 Slack Zoho Campaigns DocuSign

Leak Screenshot:

Leak Screenshot