Buy Me a Coffee

Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo reutlingen.ihk.de

Group: medusalocker

Discovered by ransomware.live: 2023-06-24

Estimated attack date: 2023-06-16

Country: DE

Description:

DescriptionClient Case – agreement – email(.msg)- contracts – and other documents PRICE-$80000


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • extmail.ihkrt.de.
  • ihkextsrv01.ihkrt.de.
TXT Records
  • v=spf1 include:spf.ihk.de include:spf.mailjet.com include:spf.sendinblue.com include:spf.protection.outlook.com ip4:193.169.94.0/23 a mx ip4:212.90.151.74 ip4:213.172.107.171 ip4:138.201.75.198 ip4:212.71.198.148 ip4:91.213.27.241 ip4:178.63.30.27 -all
  • Sendinblue-code:c3809af9656fede96f6bdd68ef619b24
Cloud / SaaS Services Detected
Mailjet Sendinblue

Leak Screenshot:

Leak Screenshot