Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Logo www.goodmanmfg.com

Group: Stormous

Discovered by ransomware.live: 2025-12-08

Estimated attack date: 2025-12-08

Country: US

Description:

Administrative/System Files/ADMIN, DOAS,General operational, administrative records, and potential system configuration files /Proprietary Engineering Drawings/IP/Highly specific technical documents, schematics, and design files (Intellectual Property). The (MklUp) indicates marked-up or working drafts.Product Line/System Data /RoofTop Systems Folder, Goodman Models, Goodman 12.5 /Confidential information related to specific product lines,Systematically numbered Bitmap image files (BMP), which function as internal references for parts, components, or quality checks/Goodman LC


🕵️ Infostealer activity detected by HudsonRock

Compromised Employees: 10

Compromised Users: 129

Third Party Employee Credentials: 8


External Attack Surface: 58


Infostealer Distribution


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain.operations@web.com
MX Records
  • No MX records found.
TXT Records
  • No TXT records found.
Cloud / SaaS Services Detected
No well-known cloud or SaaS service detected.