Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo dzsi.com

Group: lynx

Discovered by ransomware.live: 2024-11-07

Estimated attack date: 2024-10-05

Country: US

Description:

DZS is a global leader of Network Edge, Connected Home/Enterprise and AI Cloud Software solutions that enable gigabit broadband everywhere.


🕵️ Infostealer activity detected by HudsonRock

Compromised Employees: 2

Compromised Users: 7

Third Party Employee Credentials: 6


External Attack Surface: 6



DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuse godaddy.com
MX Records
  • us-smtp-inbound-2.mimecast.com.
  • us-smtp-inbound-1.mimecast.com.
TXT Records
  • atlassian-domain-verification=boMOp54b8C79d6XfEw2ivQdpFp2kjVbM36xoSmVbZgRQdQ4G6gSs5TiYCRhv6rnl
  • v=spf1 include:us._netblocks.mimecast.com include:spf.protection.outlook.com include:_spf.salesforce.com include:assia-inc.com include:email.freshservice.com include:spf_c.oraclecloud.com include:mktomail.com ip4:199.190.211.2 ip4:12.189.166.36 ip4:12.35." "15.116 ip4:34.64.202.199 ip4:195.8.104.250 ip4:195.8.104.201 ip4:195.8.104.152 ip4:195.8.104.20 ip4:195.8.104.21 ip4:121.169.249.10 ip4:1.220.205.163 -all
  • ktmlun1bnre6gpnpp31lv6r6c3
  • asv=56f3c87df923b2bca80f149f44042035
  • adobe-idp-site-verification=41f3daa77cd7403d5d96d4145f04011d69be8b8c39816e4118953b910a8d2e19
  • atlassian-sending-domain-verification=cef11cce-3692-4a8f-93a2-cba401ba6dee
  • p8dadittb20noq3d13m5lbpv3c
  • mscid=FuBzyyhCFMG3McS4uXCZmmHC6Sstw2E2yLAVR9MSDIJBi980jyZowZRwHxekDNY5xJ4QGcLbf0rGFbZ/JMQ6/g==
  • ge65qnkqnq3j507a49plklo24.
  • 0ed1fe018a14adc969e090404f9fd9caa64b7871ec
Cloud / SaaS Services Detected
Adobe Atlassian Salesforce Marketo Oracle Cloud Mimecast

Leak Screenshot:

Leak Screenshot