Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo sccu.com

Group: dispossessor

Discovered by ransomware.live: 2024-04-19

Estimated attack date: 2023-09-02

Description:

sccu.com


🕵️ Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 476

Third Party Employee Credentials: 0


External Attack Surface: 88



DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain.operations web.com
MX Records
  • mxb-0008ef02.gslb.pphosted.com.
  • mxa-0008ef02.gslb.pphosted.com.
TXT Records
  • _globalsign-domain-verification=-NZAE2fKCmD-JLl8S98dbfYMBIyaJ2jh2iCPngrnPQ
  • v=spf1 redirect=sccu.com.on.autospf.email
  • MS=83DF3A78FDFB0D065E1A497AB41323210770CD27
  • docusign=d8e7af1f-6c98-45ee-95cd-f59b053423ea
  • google-site-verification=MSoSL1_NGo02KTHTaxH64-X4Ez_D3wInwKcGPyqWcLQ
  • docusign=22728cea-9007-43b4-b27c-02a3778c8092
  • smartsheet-site-validation=7PqCX4OvcXiTlwvFaIqeMxrf07LlRtq9
  • apple-domain-verification=md8nJnf5EGth5exp
  • cisco-ci-domain-verification=1445da8d9a2de538405732ed00fc1a68b0b3aa88d1db56550ede7de340081658
  • adobe-idp-site-verification=7d6a49c752163843f797c4667efe8b830d8f386c4a7e925fc58abf38602ae8c3
Cloud / SaaS Services Detected
Adobe Apple Cisco DocuSign

Leak Screenshot:

Leak Screenshot