Buy Me a Coffee

Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo payrollselectservices.com

Group: lockbit3

Discovered by ransomware.live: 2023-09-20

Estimated attack date: 2023-09-20

Description:

We downloaded all the confidential data of their company, clients, employees, partners. Confidential data of every company they serve. This includes 180 clients, personal account logins and passwords, taxes, employees, SSN, bank details, etc.Info...


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • trustandsafety support.aws.com
  • a8f1370b-f1b5-47aa-b979-6962670cd3a7 identity-protect.org
MX Records
  • payrollselectservices-com.mail.protection.outlook.com.
TXT Records
  • v=spf1 include:spf.protection.outlook.com ip4:18.208.22.151 -all
  • MS=ms95637690
Cloud / SaaS Services Detected
Microsoft 365

Leak Screenshot:

Leak Screenshot