Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

www.cisco.com

cisco.com

Group Kraken
Discovered 2025-02-09
Est. attack date 2024-04-24
Country US

Description:

You lied to us and play for time to kick us out. We will meet you soon, again. Next time you'll have no chance. cisco.com\...

Infostealer activity detected by HudsonRock

Compromised Employees: 556

Compromised Users: 332412

Third Party Employee Credentials: 1053


External Attack Surface: 200


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abusecomplaints@markmonitor.com
  • whoisrequest@markmonitor.com
  • infosec@cisco.com
MX Records
  • aer-mx-01.cisco.com.
  • alln-mx-01.cisco.com.
  • rcdn-mx-01.cisco.com.
TXT Records
  • notion-domain-verification=IsKmFIvIIP8RUQNn4ZGQjzuCdZnI7TY7xcIYb65QQE8
  • mixpanel-domain-verify=2c6cb1aa-a3fb-44b9-ad10-d6b744109963
  • postman-domain-verification=bac0835520fcf3b408c07c584b3575452de5930d08a942cc0d000f1267a5b20de395ce8ccce9d6a6d58feff7c25f4000a22cd36968d8ac95ff234ab22ab264bb
  • flexera-domain-verification-oxonqwdadtkprrcn
  • jamf-site-verification=0mwRCzzRvk_HiKjmiqR3Lw
  • pendo-domain-verification=Ad800_b0VJCaE7Ued9Ug3pIQ_V4
  • h1-domain-verification=rix5vuxntVpma4rTL2DbE3FDrrPjedhnRaqaHvghyod3egmZ
  • amazonses:mX+ylQj+fJAfh9pr03yIR7YvjKZ1bOo5ABegqM/5pvI=
  • airtable-verification=8cd8b684d3d85964f2769dcb89944501
  • QuoVadis=94d4ae74-ecd5-4a33-975e-a0d7f546c801
  • docusign=5e18de8e-36d0-4a8e-8e88-b7803423fa2f
  • fastly-domain-delegation-im0VCGY5X0axEEmhXJb2-347911-20210310
  • intercom-domain-validation=8806e2f9-7626-4d9e-ae4d-2d655028629a
  • docusign=95052c5f-a421-4594-9227-02ad2d86dfbe
  • docker-verification=4c56633a-274e-4858-88a2-2aeceffcfd66
  • adobe-idp-site-verification=c900335b8b825859b51473b9943a3880ae795df47426483b0a67630377a902f5
  • google-site-verification=WmdDuSXl3PMb-48qcY6VUbW9kzNPe46zn9uDwgB2wX0
  • v=spf1 redirect=spfa._spf.cisco.com
  • cloudflare_dashboard_sso=f60a7d128e406b8d9dd4103dd3554f6b
  • duo_sso_verification=AxenLdoqIXzjl2RJzE1BlOfkawDbDFlnbyvjAt8vcjKHBkvYwEMySDRk5QmBd66v
  • stripe-verification=2B4F3B35976CFB93CA884A90BF3E0A8873EAC7C5AFD06D7047E87B794EC55DBB
  • asv=ac90e11808e87cfbf8768e69819b1aca
  • atlassian-domain-verification=7JYRlY9ijBijTJ0YS5a8/58DU7OfKAHMYRufcy0TC57j2mNceH8rg4ajRzErc22Z
  • google-site-verification=V3t2K3dvr9fcd1YWwwanSmebEOO_UNTP06HR2_gUO5M
  • pendo-domain-verification=5995ba9c-9bf8-43d8-9e5a-309856760011
  • atlassian-domain-verification=AYTzL6wSVsW0IdyQp7gwv6lwtHdpMATnb8QriqyJ0niAaZct9kdSlXvfuE4GcoxU
  • duo_sso_verification=6Q7pJwSZ3damWHBcB8TNd9I5oduLRAFDDhip2pTFaa3QoIZtZnCgzjyZr5teSOWS
  • adobe-aem-verification=www-idev-cloud.cisco.com/24859/366204/1b990ef7-ff88-4938-bdd9-8458cc152f57
  • notion-domain-verification=7sz4S3LLtNIHZpYsgTTgOcRLlLrJ5JrmIgVcdRtGi1X
  • mZvHszGlmDhvPOUKL+6JMiw/VtckyOMKjcw1PLcjYowxM2PVLX2xG0ZSgdHRm8HXfaaGR2pMvhIrBX1tX3aKRQ==
  • sending_domain731003=25e34fadea88da7e64f0fab1e32d094f1f1e0fb2b97622deac2521f7a2c5b2bc
  • 926723159-3188410
  • stripe-verification=0BAD851A6A7ACC4A12DDCE03460CCEFAC86320A8494FDCCED35F71EE25EF3D03
  • google-site-verification=r-K1CIdXkgRWxZstUHtVyM2UfwflnGgr4AR9_Qhk28Q
  • adobe-aem-verification=www-devint-cloud.cisco.com/24859/366173/9418f2a2-ef45-4788-9de9-91c7d19038b9
  • sending_domain1067842=8806a83586b0389c05457f8b2f06e4859b3f1b0d6bad52e5fee552bfd0a853e0
  • atlassian-domain-verification=2ldosmg0o2Mhpyok1OISaSGygWU9zk6fLLWdoczXtHap9luhaHA/pwEaj2Tk6ROK
  • flexera-domain-verification-nsbtshbvpbsmbnzh
  • twilio-domain-verification=268434bd6a91bdd8d3bb5e6cffeeace7
  • yahoo-verification-key=2B33D2zyxdBOxUw/abowAuwQ2pdtznP6ULDfQC3ag2g=
  • pendo-domain-verification=c9796502-c914-4e50-892d-e426f2ac68e9
  • miro-verification=53bf5ccd47cb6239fe5cf14c3b328050dd5679ac
  • google-site-verification=Vc0Pir22m1u9yw5HjXf6TYO6rlAI9EY8IVKUma-OqDY
  • workplace-domain-verification=Uhv7QPQ22nbuD3vG0jspf7R6LruYoS
  • amazonses:QbUv5pPHGQxRy1vKA0J7Y/biE9oR6MTxOTI1bZIfjsw=
  • google-site-verification=DN8r8LEcNiPYD95x3VnUM7Q6BH2H3390qvdIy4QjpvU
  • duo_sso_verification=sKMGaTln2vmQuKwaE4hKtTEY1UYn2JzAaxSZzGjkgJrKuZChN344mhIptyczoNBA
  • airtable-verification=18787f2dc47697bb547e871772aba0be
  • amazonses:7LyiKZmpuGja4+KbA4xX3lN69yajYKLkHH4QJcWnuwo=
  • duo_sso_verification=pG21Oj5OPCxRPsWXsfbauWT9oua82cKtYUPAmsQvovKNq3xqWEcsEMEAhtXy8AFr
  • OSSRH-97236
  • fastly-domain-delegation-w049tcm0w48ds-341317-20210209
  • fastly-domain-delegation-e9a758d22183504af2d5ab4d9a9853da-20210127
  • ZOOM_verify_Gf6CaEdJ5aKGvjcUrZRkiA
  • MS=ms35724259
  • airtable-verification=8bf444fd0fad14a3aae2681cb7d68641
  • google-site-verification=lW5eqPMJI4VrLc28YW-JBkqA-FDNVnhFCXQVDvFqZTo
  • fastly-domain-delegation-z9slsbDdX0-368365-2021-05-14
  • stripe-verification=8e54fae7680b23aad6d5e3417be73a043f7e45cd2767272dbe0c9c6eac903291
  • airtable-verification=c0b5bd3f3db736f775f0dbe4e103cdea
  • airtable-verification=d95d028f039252314cb7507fb88e4317
  • facebook-domain-verification=qr2nigspzrpa96j1nd9criovuuwino
  • hubspot-domain-verification=NDQzNGY2ZWEtZTY0ZC00ZDQyLWI4YzctOGRkNDVjNTQ4YTAx
  • wiz-domain-verification=af241e6396696eedf1b361891435f6b21bdebb5621941d99279298c076b5bf5f
  • google-site-verification=9MlQU9MMQ1jHLMUkONKe6QzZ-ZIGRv0BCD1_rY1Zdmc
  • airtable-verification=d886631ce96b77ba775f9bddab44df92
  • atlassian-domain-verification=Gt2demeKDLmtNc9kPZhaAHFA37DEIcmFGUd6LARvB4yjLG70s3WZhaJJ15y499sb
  • SFMC-o7HX74BQ79k7glpt_qjlF2vmZO9DpqLtYxKLwg87
  • facebook-domain-verification=1zoxo8z7t013gpruxmhc8dkerq47vh
  • apple-domain-verification=qOInipPgso3W8cmK
  • elevenlabs=X_8Xi7v2hC20yVbziZuWtkapfDzUtNK3BogfZKVe9gY
  • atlassian-domain-verification=672RcADvt8BPqsb9gCN2ZC5DoTAhUT8abC1blYKQxi/MHMaGoA/BuvjFMaWRtgd7
  • bfefecbd-d5df-4b3a-b0dd-54bf5c72e698
  • jetbrains-domain-verification=e9mcf886rjng68x4qu59h22ef
  • airtable-verification=4114c0f710cfc430d841e55ed7ed920d
  • identrust_validation=IGfVhawoLyaH5CKT49RKObpqHgYyXRvd691dO1oCEOfh
  • google-site-verification=qPS9ZkoQ-Og1rBrM1_N7z-tNJNy2BVxE8lw6SB2iFdk
  • pendo-domain-verification=c9d2fba1-7d94-4cf9-a6fb-310883c8bb15
  • atlassian-domain-verification=UwP1ncfiphlFs+wRx8wIBSXDScwNL7Jrw7tq2rnYz3+9T5+Md9eTDRgNPCikxtOx
  • airtable-verification=606530d538d1833c5fc724117ca5409a
  • c900335b8b825859b51473b9943a3880ae795df47426483b0a67630377a902f5
  • cursor-domain-verification-evn8nj=Ml5OeQYe3sBg8uZOIeRrJgCO7
  • duo_sso_verification=IYdVUIrb2L95JVejSXV3hfsJVDZolQKKOPBztlD6TIgfCRSKeMuf8WgbQuFLD4aL
Cloud / SaaS Services Detected
Adobe Apple Atlassian Amazon SES/WorkMail Microsoft 365 Stripe Twilio Miro Flexera JamF Cisco Duo DocuSign Zoom

Leak Screenshot:

Leak Screenshot