westwood
westwood
Group: safepay
Discovered by ransomware.live: 2024-11-19
Estimated attack date: 2024-11-19
Country:
Description:
ZIP-50GB - Revenue $8.1 Million
🕵️ Infostealer activity detected by HudsonRock
Compromised Employees: 0
Compromised Users: 2
Third Party Employee Credentials: 0
External Attack Surface: 1
DNS Records:
The following DNS records were found for the victim's domain.
WHOIS Emails
- domain.operations web.com
MX Records
- mx1-us1.ppe-hosted.com.
- mx2-us1.ppe-hosted.com.
TXT Records
- 9hr9i9dumh83c95411k3ecjnjt
- MS=AED7FC40DEF1520719FC974CC3E1B01A05A1BEAF
- MS=ms59961146
- u4fa6msrf82teg5rinc462gdnn
- YJpFNhochUSSB6pE/lkQHceGnJyjE6uVmhKnTmm8GBd7b0wTf0cVtB/b/hGYs0iqQhUpFSM5Prv3DYRtJfpkkA==
- v=spf1 ip4:96.35.193.163 ip4:35.134.160.189 a:dispatch-us.ppe-hosted.com include:spf.protection.outlook.com ~all
Cloud / SaaS Services Detected
Microsoft 365
Proofpoint Essentials