Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

baycrestpartners.com

baycrestpartners.com

Discovered 2023-05-02 21:49 UTC
Est. attack date 2023-05-02

Description:

#NationalHazardAgencyWe stole 18 gigabytes of data and documents, including SQL databases and mail backups. You have two choices: pay us or leak 18 gigabytes of documentation.Contact us

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • c393c0d46b70c1bef908497bc2d01078409cff7fb6a1ac5a7457ee9dffa3e6cbbaycrestpartners.com.whoisproxy.org
  • c393c0d46b70c1bef908497bc2d0107830612b5b4605d4bbc89bf06c86001a7dbaycrestpartners.com.whoisproxy.org
  • c393c0d46b70c1bef908497bc2d010786b9dae6d79b6ff1ddfcb8d9079427534baycrestpartners.com.whoisproxy.org
  • c393c0d46b70c1bef908497bc2d01078692367a9c1b34ebaebbb39e47794aee3baycrestpartners.com.whoisproxy.org
  • trustandsafetysupport.aws.com
MX Records
  • d350416b.ess.barracudanetworks.com. Barracuda
  • d350416a.ess.barracudanetworks.com. Barracuda
TXT Records
  • seatsurfing-verification=957f09d3-51e2-42f1-89ad-66cfee7ef36f
  • v=spf1 include:spf.ess.barracudanetworks.com a:dispatch-us.ppe-hosted.com include:spf.protection.outlook.com include:_spf.streetcontxt.com" " ip4:38.125.86.216 ip4:208.81.212.0/22 ip4:64.235.150.181 ip4:64.235.150.252 ip4:64.235.154.105 ip4:64.235.154.109 ip4:38.125.86.213 ~ALL
  • D009D774F8
  • MS=ms63137743
  • google-site-verification:gK5hx_RL7giXHrsmYwy7YBoMI7zIEXxto3Cj2Nab0P8
  • ppe-93c513638a55f71f06e12500e037bbaa955bcc4d
Cloud / SaaS Services Detected
Microsoft 365 Proofpoint Essentials

Leak Screenshot:

Leak Screenshot