olame#####
olame#####
Group: clop
Discovered by ransomware.live: 2024-12-24
Estimated attack date: 2024-12-24
Country:
Description:
Presumed victim name: Olameter Inc - Cl0p announcement. We have data of many companies who use cleo. Our teams are reaching and calling your company and provide your special secret chat.
🕵️ Infostealer activity detected by HudsonRock
Compromised Employees: 0
Compromised Users: 4
Third Party Employee Credentials: 1
External Attack Surface: 1
DNS Records:
The following DNS records were found for the victim's domain.
WHOIS Emails
- domain.operations web.com
MX Records
- olameter-com.mail.protection.outlook.com.
TXT Records
- google-site-verification=9vfOkATovo4Foe-ZM9wPy1k-buBJEEGTgpfwCJvnzK4
- twilio-domain-verification=1a82f9dea56bafac40c1f505ea15c1be
- google-site-verification=C48uyB7Uq2feJY57mr37T-TyQ34ocDR8kXKPfg8bhOs
- v=spf1 include:spf.protection.outlook.com include:_spf.salesforce.com ~all
- google-gws-recovery-domain-verification=52836518
- google-site-verification=Ky4mmGp56Gn-19Ao7PBRl93ISuTYaa4QAT59qFMICFM
- ZOOM_verify_pVkjEqVTQy-mQVYuUttEGQ
- y6ll/3kSrObhdhF/6KOjVbnfoVj/kaJRSUg5hcg83LMD4Q0qRBkbAN+Yodbw1fsfpkT2EAs2LilKGKlK64qMAg==
- MS=ms11848531
Cloud / SaaS Services Detected
Microsoft 365
Salesforce
Twilio
Zoom
Leak Screenshot:
