Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Logo primesourcestaffing.com

Group: Ransomhub

Discovered by ransomware.live: 2025-02-11

Estimated attack date: 2025-02-10

Country: US

Description:

[AI generated] PrimeSource Staffing is a Denver-based company that specializes in work placement services for job seekers and employers. They primarily serve healthcare, office and professional, light industrial, manufacturing, and distribution industries. Their task involves matching suitable candidates with available positions, using effective strategies to ensure a positive fit for both parties.



DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuse@hostgator.com
MX Records
  • smtp.google.com.
TXT Records
  • v=spf1 ip4:63.234.158.98 ip4:192.185.235.185 include:websitewelcome.com include:spf.protection.outlook.com -all
  • H4k6EFHlQQzw44VWY5nVuVOtFAXhHqaN9PjlgdIbFYGN4L6sRvmWh/ROmP5EJ/upuPr1NuGWO54103m0auXtxg==
  • google-site-verification=_YbdsyCgY3ccBKSjJupLb_9i6GlyjyDd-Z2nkkFHlp0
  • MS=ms38237726
  • 7um4aura1kq8s35r69glu3omg
Cloud / SaaS Services Detected
Microsoft 365

Leak Screenshot:

Leak Screenshot