Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo www.farmaciaflorio.com

Group: babuk2

Discovered by ransomware.live: 2025-01-27

Estimated attack date: 2025-01-27

Country: IT

Description:

www.farmaciaflorio.com


🕵️ Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 9

Third Party Employee Credentials: 0


External Attack Surface: 2



DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuse serverplan.com
  • info farmaciaflorio.com
  • domini serverplan.com
MX Records
  • mail.farmaciaflorio.com.
TXT Records
  • v=spf1 ip4:86.107.32.167 +ip4:185.81.0.69/24 +a +mx +ip4:185.81.0.69 +ip4:185.81.0.102 include:spf.mandrillapp.com include:servers.mcsv.net ?all
Cloud / SaaS Services Detected
Mandrill

Leak Screenshot:

Leak Screenshot