Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

defi SOLUTIONS.

defisolutions.com

Discovered 2024-04-23 16:14 UTC
Est. attack date 2024-04-23
Country US

Description:

defi SOLUTIONS is a company that develops SaaS based loan origination software solutions. It also provides a platform that enables transferring and receiving loan documents and a web-based auto loan portfolio marketplace. The company serves consumer finance companies, banks, credit unions, etc.

Infostealer activity detected by HudsonRock

Compromised Employees: 1

Compromised Users: 31

Third Party Employee Credentials: 1


External Attack Surface: 14


Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • 6f3217ea450ece87a58a2fbdd0e6cbc92d2c49a34252def2752c65f121229332defisolutions.com.whoisproxy.org
  • 6f3217ea450ece87a58a2fbdd0e6cbc96235d5f10d3780c3ed2250511539060ddefisolutions.com.whoisproxy.org
  • 6f3217ea450ece87a58a2fbdd0e6cbc9ec4b8658a9c132edbfad0f41215ae75fdefisolutions.com.whoisproxy.org
  • trustandsafetysupport.aws.com
  • 6f3217ea450ece87a58a2fbdd0e6cbc9960a7bfdd0bd30d089ec6d1cd272a78ddefisolutions.com.whoisproxy.org
MX Records
  • us-smtp-inbound-1.mimecast.com. Mimecast
  • us-smtp-inbound-2.mimecast.com. Mimecast
TXT Records
  • v=spf1 redirect=9v58hqvi._spf._d.mim.ec
  • zoho-verification=zb29563391.zmverify.zoho.com
  • MS=ms34525851
  • MS=ms46620900
  • MS=ms54113006
  • anthropic-domain-verification-a2a14h=1k3okbFHdTnJ7at4TzDBED6ce
  • apple-domain-verification=tdpCK21FRGYoNZ93
  • atlassian-domain-verification=EG8BbEIjV6tVj/79sRUFfcyHUyqx3LqBo6Wz+aIWGffIGHXq7337Ax/3/Iyv3EUQ
  • ca3-916bd35c939346f2b3e554994ff33fad
  • google-site-verification=6ng6AjFd02kunbndduEfp5chQ2rohsxO6IyjAyouOZ4
  • pardot511281=47f25d458fcbb4a22b7056911d65ad94a4565262f89018ddcf48c7962b1d1ce2
  • specops-verification-code=52917e0a-3577-4467-9abc-50ae4698a8df
  • status-page-domain-verification=bzd7wwnz6q9p
Cloud / SaaS Services Detected
Anthropic Apple Atlassian Microsoft 365 Mimecast Salesforce Zoho Campaigns

Leak Screenshot:

Leak Screenshot