Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo bulentklise.com.tr

Group: stormous

Discovered by ransomware.live: 2025-06-14

Estimated attack date: 2025-06-14

Country: TR

Data exfiltrated: 2GB

Description:

Customer names, identification numbers, production orders, client records, delivery tracking data, customer information, logos, and more


🕵️ Infostealer activity detected by HudsonRock

Compromised Employees: 4

Compromised Users: 1

Third Party Employee Credentials: 5


External Attack Surface: 3


Infostealer Distribution


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • mail.bulentklise.com.tr.
TXT Records
  • natro-domain-verification=8137cdbcea5c534b3ef90f95bb9c9278
  • v=spf1 a mx ip4:195.175.56.114 include:u9550214.wl215.sendgrid.net ~all
  • google-site-verification=sCatXhEfGZGpHnSnTOnfB4QwQb6nAbwM_qYUDd6skT8
  • MS=8ECBB1428FFCB2675C6D44812563AEEDAB705CC5
Cloud / SaaS Services Detected
SendGrid

Leak Screenshot:

Leak Screenshot