Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

maxionwheels.com

maxionwheels.com

Discovered 2022-12-22 20:11 UTC
Est. attack date 2022-12-22

Description:

Founded in 1908 and headquartered in Novi, Michigan, MAXION Wheels wheel manufacturer for passenger cars, light trucks, buses, commercial trucks, and trailers.

Infostealer activity detected by HudsonRock

Compromised Employees: 47

Compromised Users: 3

Third Party Employee Credentials: 36


External Attack Surface: 36


Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain.operationsweb.com
MX Records
  • mxb-001ff101.gslb.pphosted.com. Proofpoint
  • mxa-001ff101.gslb.pphosted.com. Proofpoint
TXT Records
  • P2A_11427_7
  • uoAJayZt3iOEa12dGkHNX3Hwi9bsJ0sUA/IcF+EXPwQUiZCWvHOwFAXXzH1No+MHLKD3UNlkG/g4qGLY3iEi5w==
  • domainVerification=9bce764c-0e6b-4df2-91bc-58b9e4fa1f82
  • MS=ms32251643
  • _m5ruag9ecv7q14osjy5d39wrcefkm3q
  • v=spf1 ip4:216.113.128.0/19 ip4:64.18.0.0/20 ip4:207.126.144.0/20 ip4:74.125.148.0/22 ip4:74.125.244.0/22 ip4:204.69.230.0/24 ip4:200.232.10.6/32 include:spf-001ff101.pphosted.com include:spf.protection.outlook.com -all
Cloud / SaaS Services Detected
Microsoft 365 Proofpoint