Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

bbsautomation.com

bbsautomation.com

Discovered 2023-03-19 15:00 UTC
Est. attack date 2023-03-19

Description:

BBS Provides InnovativeAdvanced Engineering WorldwideBBS is committed to providing engineering solutions which are not only financially feasible and structurally sound, but help improve safety, reliability and profitability. At BBS, assembly auto...

Infostealer activity detected by HudsonRock

Compromised Employees: 4

Compromised Users: 0

Third Party Employee Credentials: 30


External Attack Surface: 3


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domainabusecscglobal.com
MX Records
  • mx2.hc116-66.eu.iphmx.com. Cisco/IronPort
  • mx1.hc116-66.eu.iphmx.com. Cisco/IronPort
TXT Records
  • sending_domain938713=37127bfa04cbe829b0caa4b03ad84115cbc0472e00138e0d98e26a3f1dcd6815
  • v=spf1 include:spf.durr-group.com a:tartu.mosaiq.com ip4:122.97.13.162 ip4:96.87.109.145 ip4:175.136.228.124 ip4:212.183.172.198 include:spf.protection.outlook.com include:spf.eu.exclaimer.net include:spf.de.umantis.com include:spf.imc-hosting.com -all
  • MS=ms67678656
  • MS=ms73854339
  • swisssign-check=WlTyjjnv0Vg6cmcBu0IUtgjXeTc
  • teamviewer-sso-verification=8df0077f97d44f92be1b492d856c74b2
Cloud / SaaS Services Detected
Microsoft 365 Teamviewer

Leak Screenshot:

Leak Screenshot