duvel
duvel
Group: stormous
Discovered by ransomware.live: 2024-03-07
Estimated attack date: 2024-03-07
Country:
Description:
Belgium
🕵️ Infostealer activity detected by HudsonRock
Compromised Employees: 7
Compromised Users: 29
Third Party Employee Credentials: 0
External Attack Surface: 10
DNS Records:
The following DNS records were found for the victim's domain.
WHOIS Emails
- abuse enom.com
MX Records
- mx.duvel.com.
TXT Records
- bw=lI76tDj8Ay0EyN9IbUy3XshpZhvueKg04dqMwnFw+4aP
- google-site-verification=2wAzuMQAmhi2kTAoN4qnEKFZyO1Xs5JyTQCpwqXf9x8
- v=spf1 mx ip4:81.246.21.194 ip4:54.229.2.165 ip4:52.30.130.201 include:spf.protection.outlook.com include:_spf.relay.mailprotect.be include:spf.duvelmoortgat01.hypernode.io include:_spf.salesforce.com include:26099407.spf02.hubspotemail.net -all
- CbsQqTp0lGiGHLKd3/05KVbjEDeao3a/kE2cUeJkfUCsMbDM8KpES/b9487MWuoHPPvJ6oaBFVD+BELAsZfUnw==
- MS=ms91745853
- _globalsign-domain-verification=PVUBCVXp5vVjmEHLef5274r0invaSwvMJ_aT4fxRZP
- _globalsign-domain-verification=QD0JxQKPZOpAT2Kg8kqZroqNEuf7VNf52OvaSCGIQ5
- apple-domain-verification=0kQmUo3b4LMgW1zy
- atlassian-domain-verification=lwPYK7LiOZBNaHfsxR7m/AxB5J3r9dLAZaGE7nyCP/qK2RrZ7dMJ8C2wDZjkaj/z
Cloud / SaaS Services Detected
Apple
Atlassian
HubSpot
Microsoft 365
Salesforce