Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo sorbonne-universite.fr

Group: funksec

Discovered by ransomware.live: 2025-03-07

Estimated attack date: 2025-03-07

Country: FR

Description:

[AI generated] Sorbonne Université is a prestigious French higher education institution located in Paris, established in 2018 by merging Pierre et Marie Curie University and Paris-Sorbonne University. It provides a wide range of study programs, including sciences, medicine, humanities, and arts. Alongside teaching, it's known for its strong focus on research and innovation. Its alumni and faculty include multiple Nobel laureates and Fields Medalists.


🕵️ Infostealer activity detected by HudsonRock

Compromised Employees: 68

Compromised Users: 1589

Third Party Employee Credentials: 52


External Attack Surface: 113


Infostealer Distribution


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domaine renater.fr
  • presidence sorbonne-universite.fr
  • brahim.marir sorbonne-universite.fr
  • mounir.cherigui sorbonne-universite.fr
  • jean-luc.munier sorbonne-universite.fr
MX Records
  • mxb.relay.renater.fr.
  • mxd.relay.renater.fr.
  • mxa.relay.renater.fr.
  • mxc.relay.renater.fr.
TXT Records
  • v=spf1 include:lip6.fr include:spf.oximailing.com include:_spf.activetrail.com include:spf.cap-collectif.com include:spf1.sorbonne-universite.fr include:_spf.profils.org include:mailgun.org ?ALL
  • HARICA-cOguCdKyinFWtqFURxT
Cloud / SaaS Services Detected
Mailgun

Leak Screenshot:

Leak Screenshot