Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Logo thecsi.com

Group: threeam

Discovered by ransomware.live: 2024-01-12

Estimated attack date: 2024-01-12

Country: CA

Description:

CSI is a product lifecycle management company based in Scarborough, Ontario. CSI is ISO 9001:2015 + TL 9000 - V R6.0/ R5.5 Certified. CSI specializes in Smart City technology, IoT and have a state-of-the-art data storage facility in...


🕵️ Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 5

Third Party Employee Credentials: 5


External Attack Surface: 1



DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain.operations web.com
MX Records
  • thecsi-com.mail.protection.outlook.com.
  • mx2.dnsmadeeasy.com.
  • mx3.dnsmadeeasy.com.
  • mx1.dnsmadeeasy.com.
TXT Records
  • google-site-verification=1fWihnaxOB_33-AuiiOQUzMyKLAPBvnvceBfZ_o2IJg
  • f7kv9xfbd56g8y1ww01jv7vbn7zrv6lt
  • pfw0h3hc73pt98b3wncc593vpcktcsg5
  • 6q2vhx4gg81p7zrgy2kkmbvf782f1qxq
  • Isc4OBhuoZ05nz+Gs/yrI6wZ0//GUC7pCpO4VFlX6gQ=
  • v=spf1 include:spf.protection.outlook.com -all
  • _97gtubmd71pc0ojw72akyzufdg60wtw
  • jg57lb8nnjr1lbw2s4dx0hw7bdt4wm59
  • 6bwq7csh5zr281tpd6zy33nzt78nbtf9
Cloud / SaaS Services Detected
No well-known cloud or SaaS service detected.

Leak Screenshot:

Leak Screenshot