Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Logo www.nexus.edu.my

Group: Qilin

Discovered by ransomware.live: 2025-05-27

Estimated attack date: 2025-04-25

Country: MY

Description:

We accomplish this by "celebrating diversity and challenging minds". Our promise is to treat everyone as gifted and talented individuals and to foster those talents and gifts through careful mentorship and guidance that is based on respect fo ...


🕵️ Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 6

Third Party Employee Credentials: 14


External Attack Surface: 6


Infostealer Distribution


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuse@mynic.my
MX Records
  • aspmx.l.google.com.
  • alt1.aspmx.l.google.com.
  • alt2.aspmx.l.google.com.
  • alt3.aspmx.l.google.com.
  • alt4.aspmx.l.google.com.
TXT Records
  • google-site-verification=vHgBaKOrxoeC7XEVi_5MTTgmjNKN6b08YY7G8sT99Vg
  • MS=A8E263372D1289E2B155D8B09487E8C952335B0D
  • ibmid=0caaa81f-8aeb-4c94-9ab2-30d9bcd8cb9b
  • s009o0e1k4rav1r80eceuopb1d
  • =spf1 an include:_spf.google.com ~all
  • v=verifydomain MS=3673321
  • I88EQR3IEC7D7QOC9B7V0IFCCU
  • google-site-verification=RGOmuFtzw65iY70c92oYGq0yyuXG9FaY8-U5WviISGU
  • apple-domain-verification=rFDy2FFOra3lzla8
  • c37tvukre5bn
  • gmfrgasvojkkf012062ha2b2f6
  • msjjh68hucj02orv4oaoukjl7p
  • kg3hrf1ite2j1p889lma6smt9g
  • v=spf1 include:_spf.google.com include:app.digistorm.com -all
  • google-site-verification=Olk5S5lkd2jLXdASP3FjIi8LBXkK7OKXTt3men26eUU
Cloud / SaaS Services Detected
Apple Microsoft 365

Leak Screenshot:

Leak Screenshot