Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

esaote.com

esaote.com

Group Babuk2
Discovered 2025-03-18
Est. attack date 2025-03-18
Country IT

Description:

esaote.com

Infostealer activity detected by HudsonRock

Compromised Employees: 44

Compromised Users: 61

Third Party Employee Credentials: 19


External Attack Surface: 87


Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domainabuse@tucows.com
MX Records
  • esaote-com.mail.protection.outlook.com.
TXT Records
  • MS=ms89658111
  • apple-domain-verification=29iDdlNqf4ovsviP
  • _4ro4khwkugvdajg0s3vu2tqu8p8fo4w
  • google-site-verification=EUvg1v3HYcI7B6eMP22tExmSLSDAxgrxbhm1Bcrnce8
  • v=spf1 include:_netblocks.esaote.com ip4:213.92.112.226 " "ip4:213.21.176.178 ip4:46.101.58.97 ip4:213.156.53.83 ip4:77.43.127.67 ip4:213.21.158.77 ip4:13.111.74.220 " "include:spf.protection.outlook.com include:spf.sendinblue.com " "include:spf.byway.it include:_spf.google.com include:spf.massmtp.com " "include:portalmail.assentcompliance.com ~all
  • Sendinblue-code:8130425a3d37d65e659803e04c43d8cc
Cloud / SaaS Services Detected
Apple Microsoft 365 Sendinblue

Leak Screenshot:

Leak Screenshot