Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

mercuryit.co.nz

mercuryit.co.nz

Discovered 2022-12-19 12:13 UTC
Est. attack date 2022-12-19
Country NZ

Description:

IT is a company that provides services in its field to many companies in New Zealand and Australia. Unfortunately, this company could not protect itself and its customers. As a result of our attack, more than 500 TB of customer data was encrypted...

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • mercuryit-co-nz.mail.protection.outlook.com. Microsoft 365
TXT Records
  • atlassian-sending-domain-verification=74c9fa6e-a77e-4841-b6f4-d65ff407d2f5
  • mdf2dm4v55m2upsga3r3jf4a4l
  • apple-domain-verification=KZcObRYUx81N34cJ
  • bKTlmajxyraV9YK6V+c2SWRCDV5vLvaIbzC9DrL68wVCj2Ps2Y75Ruy8B+hyzYlvBTOnYzMF3tz/YrqAf5HHjw==
  • google-site-verification=_7LhwAAjwjbKvRJrWMQa8DQdzU7TiuBaZJ4wiZ1AKY0
  • t9cfbinh85hm5a9k0lpr14co0s
  • mqc4jauoffkp9d03771jffe30c
  • atlassian-domain-verification=dlSpb5LdKHno7zHQEvdMCBlM7IilPIVLDpBs56JX4ImTw3KYwFHR8wqSfg9HUrJf
  • v=spf1 ip4:202.37.71.237 ip4:202.20.65.228 ip4:202.50.95.116 ip4:202.20.65.226 ip4:202.20.65.164 ip4:202.50.95.109 ip4:202.20.65.146 ip4:202.20.65.143 ip4:202.20.65.158 ip4:202.20.65.149 ip4:202.50.95.45 ip4:202.27.197.158 ip4:202.50.95.84 ip4:202.27.215." "87 ip4:202.50.95.81 ip4:202.50.95.66 ip4:202.50.95.96 ip4:27.111.12.0/22 ip4:202.27.197.149 ip4:202.27.194.162 ip4:202.27.215.17 ip4:202.27.194.130 ip4:202.20.65.144 ip4:203.171.33.18 include:spf.protection.outlook.com include:au.zcsend.net include:_spf.a" "tlassian.net include:one.zoho.com.au include:notification.fortinet.net include:spf.myconnectwise.net -all
  • ffs8o95cb6cj2mh8otcg1jq4dt
Cloud / SaaS Services Detected
Apple Atlassian