Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo www.nexus.edu.my

Group: Qilin

Discovered by ransomware.live: 2025-05-27

Estimated attack date: 2025-04-25

Country: MY

Description:

We accomplish this by "celebrating diversity and challenging minds". Our promise is to treat everyone as gifted and talented individuals and to foster those talents and gifts through careful mentorship and guidance that is based on respect fo ...


🕵️ Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 6

Third Party Employee Credentials: 14


External Attack Surface: 6


Infostealer Distribution


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuse mynic.my
MX Records
  • aspmx.l.google.com.
  • alt1.aspmx.l.google.com.
  • alt2.aspmx.l.google.com.
  • alt3.aspmx.l.google.com.
  • alt4.aspmx.l.google.com.
TXT Records
  • I88EQR3IEC7D7QOC9B7V0IFCCU
  • google-site-verification=RGOmuFtzw65iY70c92oYGq0yyuXG9FaY8-U5WviISGU
  • v=spf1 include:spf.zohomail360.com ~all
  • apple-domain-verification=rFDy2FFOra3lzla8
  • c37tvukre5bn
  • gmfrgasvojkkf012062ha2b2f6
  • msjjh68hucj02orv4oaoukjl7p
  • kg3hrf1ite2j1p889lma6smt9g
  • v=spf1 include:_spf.google.com include:app.digistorm.com -all
  • google-site-verification=Olk5S5lkd2jLXdASP3FjIi8LBXkK7OKXTt3men26eUU
  • google-site-verification=vHgBaKOrxoeC7XEVi_5MTTgmjNKN6b08YY7G8sT99Vg
  • MS=A8E263372D1289E2B155D8B09487E8C952335B0D
  • ibmid=0caaa81f-8aeb-4c94-9ab2-30d9bcd8cb9b
  • s009o0e1k4rav1r80eceuopb1d
  • v=verifydomain MS=3673321
Cloud / SaaS Services Detected
Apple Microsoft 365

Leak Screenshot:

Leak Screenshot