Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

menziesaviation.com

menziesaviation.com

Discovered 2022-12-02 11:06 UTC
Est. attack date 2022-12-02

Infostealer activity detected by HudsonRock

Compromised Employees: 31

Compromised Users: 30

Third Party Employee Credentials: 36


External Attack Surface: 26


Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuseascio.com
MX Records
  • mx2.hc1623-33.c3s2.iphmx.com. Cisco/IronPort
  • mx1.hc1623-33.c3s2.iphmx.com. Cisco/IronPort
TXT Records
  • tzr0lg0d9r5hsj9ntqpflqrl7tk7k81z
  • successfactors-site-verification=M2E0NDI3MTAxM2RhNmFjOTcyZWU3YmNmYzIyNDU0NjcxZGExMzMwMmJlMmM0M2I5MWZiY2U3YjAzNjJhNWFhZA==
  • v=spf1 ip4:208.86.168.7 ip4:135.84.68.123 include:amazonses.com include:spf.protection.outlook.com exists:%{i}.spf.hc1623-33.c3s2.iphmx.com include:_spf-dc55.sapsf.eu ip4:195.246.100.242 ip4:195.246.100.241 ip4:20.23.154.124/30 ip4:51.104.175.80/30" " ip4:69.72.40.70 include:outgoing-relays.descartes.com include:_spf.timeforstorm.com include:us._netblocks.mimecast.com include:_spf.salesforce.com include:147773792.spf07.hubspotemail.net -all
  • 7Vv0F7LaZ2wT9PzTkawYIyLN5gU+tJsV7qg0QxcUqC5WAT/hhl0CLLWF88SnBPhZxZYRufe2DMhNDKT/NPFF2g==
  • MS=ms83456097
  • k3wh67yxv1mdpqnsb2wmw503gqh216n4
  • successfactors-site-verification=Y2ZmYTNlODQwYmViZDk1YWUyZTk0ZTAzODFmYzE0YWRlNjU1ZGFkNjc5YWEyYzA0NDYzNzI0OTI1M2FiNTRjNQ==
  • nitro-verification-code=c2RlOTlhNGU3ZWM3NjFkMzM=
  • apple-domain-verification=2b0KBjsmTO3Y4JaR
  • proxy-ssl.webflow.com
  • atlassian-domain-verification=encNuK20MgL/FIUuN4fe2kZoM9kEMf7lWz4qUHgCTF4M3EnAaEVD6MzxjgYC8VtD
  • 1jwk02y92lq1pzgjj90f2mm6nhpf8wsk
  • q2hm1gr1d8bqvjkjy0mcymfblc41gcn9
  • MS=A368A053E5DCFC295710433B99F15F90D2C1ECB7
  • jnj5vbdnp96mbcvc0sv930dg7bdwttlc
  • MS=ms44265435
Cloud / SaaS Services Detected
Apple Atlassian Amazon SES/WorkMail HubSpot Microsoft 365 Salesforce Mimecast