Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo enovationcontrols.com

Group: lockbit3

Discovered by ransomware.live: 2023-05-18

Estimated attack date: 2023-05-18

Description:

first part of dataEnovation Controls operates today as a stand-alone subsidiary of Helios Technologies [NASDAQ: HLIO] (formerly Sun Hydraulics Corp.). With an internationally diverse team of over 300 employees, we serve customers around the world...


🕵️ Infostealer activity detected by HudsonRock

Compromised Employees: 1

Compromised Users: 1

Third Party Employee Credentials: 0


External Attack Surface: 2



DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain.operations web.com
MX Records
  • us-smtp-inbound-1.mimecast.com.
  • us-smtp-inbound-2.mimecast.com.
TXT Records
  • MS=ms54260840
  • RoY/FSsd6dENGufc5YNzP+kuirvSnfXAJ2HO+cKH69P+HQV1tka7U7gVCWAkyh1wUY3H9f7tNXpw7OXQajnXOA==
  • 0ed1fe018ab201caa1f52e40269ff8ac18dedb8e66
  • _24qainen1ili46rd1mjy0xnr09bzurk
  • MS=ms58974714
  • XIXyNelarHmY+lO+fHEBFNfIaUu70IT8yRg+ibF4nOaFEb0Ylx/I0X2FuwLzoPqHQdRHFqmyYeruKf6xHdQe2w==
  • google-site-verification=UsZZ5vA8d0eon25YkFU-WmcOAxBv6F-BjVFT9L2OMqc
  • atlassian-domain-verification=pV6gaEvYFxWEI15au1ZyNM2Bq5x0K4W8IIFl1slzIIrmVkkXuuEZdEaWF7/opcWj
  • v=spf1 ip4:64.207.253.117 ip4:64.207.253.118 ip4:199.227.132.94 ip4:195.224.183.154 include:us._netblocks.mimecast.com include:spf.protection.outlook.com include:servers.mcsv.net -all
Cloud / SaaS Services Detected
Atlassian Microsoft 365 Mimecast

Leak Screenshot:

Leak Screenshot