brightwork.com
brightwork.com
Group: warlock
Discovered by ransomware.live: 2025-08-17
Estimated attack date: 2025-08-09
Country:
Description:
[AI generated] BrightWork.com is a project management software company that provides solutions for teams and organizations to manage and track their projects. It offers templates, reports, role-based dashboards, risk management and work automation tools. BrightWork.com is designed to be integrated with Microsoft SharePoint, thereby bringing clarity, control, and simplicity to project portfolios.
🕵️ Infostealer activity detected by HudsonRock
Compromised Employees: 0
Compromised Users: 5
Third Party Employee Credentials: 1
External Attack Surface: 2
Infostealer Distribution
DNS Records:
The following DNS records were found for the victim's domain.
WHOIS Emails
- abuse godaddy.com
MX Records
- BrightWork-com.mail.protection.outlook.com.
TXT Records
- d365mktkey=3fkfgfmatuzgbljmgs9w7410f
- d365mktkey=7bg0gbfqahil6w7hx3g8sqvgr
- facebook-domain-verification=abojfw65tghcvny2ttztc4qojhkokh
- google-site-verification=D-9-kZ4uqT7-SnRd_aL_as3UWqDbxuQt2Hv7V1uxuEw
- google-site-verification=cfFc8osIjtwMgESofk_lGQ_jKfrx-sxZ7jmXxFLBXwU
- v=spf1 include:spf.constantcontact.com include:projecthosts.com include:mail.zendesk.com include:p417.msepmonline.net include:spf.protection.outlook.com include:sendersrv.com include:secureserver.net ~all
- atlassian-domain-verification=2qpEVOpYVhC40BsdLxx8mYGN8MwI/JGTbDXUaabJlPE0INaXio42jygySd4DmjUE
- atlassian-sending-domain-verification=050f546a-b0c0-46e6-85b2-ef33563a927d
Cloud / SaaS Services Detected
Atlassian
Zendesk