schoolrush.com
schoolrush.com
Group: Killsec
Discovered by ransomware.live: 2024-08-22
Estimated attack date: 2024-08-22
Country:
Description:
School Rush platform allows schools to publish personalized calendar of events to parents, send classroom pictures and activities to parents instantly, publish staff and student directories, and create notifications.
🕵️ Infostealer activity detected by HudsonRock
Compromised Employees: 0
Compromised Users: 2
Third Party Employee Credentials: 0
External Attack Surface: 2
DNS Records:
The following DNS records were found for the victim's domain.
WHOIS Emails
- abuse godaddy.com
MX Records
- aspmx2.googlemail.com.
- aspmx3.googlemail.com.
- aspmx.l.google.com.
- alt1.aspmx.l.google.com.
- alt2.aspmx.l.google.com.
TXT Records
- v=spf1 include:_spf.google.com ~all
- schoolrush.com=l0KFangYkfP8THLf35kcdxao3GSsEdlW5ApuwGVMM6o=
- schoolrush.com=amazonses:l0KFangYkfP8THLf35kcdxao3GSsEdlW5ApuwGVMM6o=
- google-site-verification=RUQrgYFZ2dezb9vWVWSPcNfDgpCREr-mFbK-Yb9D5g0
- google-site-verification=rf45_wqhuJ_0emQzSlmCNgVZFMZUTtBMf_BE6SaHZ_Q
- google-site-verification=uB9IsTpsccJg8nYmT5KobokszmWD_cBZXP1CpbI6hu0
Cloud / SaaS Services Detected
Amazon SES/WorkMail
Leak Screenshot:
