Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo teccart.qc.ca

Group: Safepay

Discovered by ransomware.live: 2025-12-14

Estimated attack date: 2025-12-14

Country: CA

Description:

Founded in 1945, the institution has a long history of delivering practical, career-focused education in technology, design, business, management, arts, …


🕵️ Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 31

Third Party Employee Credentials: 6


External Attack Surface: 8


Infostealer Distribution


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuse register.ca
  • mat mblex.com
MX Records
  • teccart-qc-ca.mail.protection.outlook.com.
TXT Records
  • v=spf1 +mx include:spf.mandrillapp.com include:39587912.spf01.hubspotemail.net include:spf.omnivox.ca include:spf.protection.outlook.com include:aadmtl.com ip4:64.187.185.51 ip4:64.187.189.218 -all
  • gck0m44pdkmtg239dude85i4vj
  • MS=ms58734012
  • google-site-verification=F0GyGwoYtaJ2Vzo1i8vUbLvUWmb4UMlWE1baAylbMcE
  • MS=4484C7A236979480AF4DF9F66EA806C41187FF1B
  • druide-validation-domaine=a237f57e2e81eb873b4005a54a299479
  • apple-domain-verification=paXXsaz4EyF3qkmC
  • /O93YFWZ/8qXBgsQ956OImGehPf6tn6dy7cNEH1E51YaVjdDr659an9Wa2d+7cAmSqZARZ3Ii4bcUEi8Og1ZMA==
  • MS=F99BC35B602D86171DDA38411743D1968CCD959D
Cloud / SaaS Services Detected
Apple HubSpot Microsoft 365 Mandrill

Leak Screenshot:

Leak Screenshot