Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Complete Payroll Solutions

completepayrollsolutions.com

Group Meow
Discovered 2024-08-26 19:10 UTC
Est. attack date 2024-08-26
Country US
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Description:

Complete Payroll Solutions is a comprehensive human resource and payroll service provider. They offer payroll processing, benefits administration, HR management, compliance, and time and attendance solutions. Known for their personalized service and advanced technology, they cater to businesses of all sizes, ensuring streamlined operations and regulatory compliance.

Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 25

Third Party Employee Credentials: 0


External Attack Surface: 17


Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abusegodaddy.com
MX Records
  • us-smtp-inbound-1.mimecast.com. Mimecast
  • us-smtp-inbound-2.mimecast.com. Mimecast
TXT Records
  • MS=ms22523171
  • MS=ms24974942
  • google-site-verification=HTsurK2Rg5Z3Py2hGiloy7i9so-g-E7SXxzDUvY8Bz4
  • google-site-verification=R-UIm5sZ0sa3GBeJa40RJCMi7s2yRArPRPnFGo5Ji5s
  • google-site-verification=ybXzkDoQsb7ubpdqDZhm6AJg7GHz7y66QGinEMMjGQk
  • o4t66h3iqdhbdfmvlot3v47hc4
  • okoe25nhmseh6680d5ivdn41t9
  • sCaCiFYRhMzCHATD12nB8TDOnfP9/9NfDuL+CZTuEXZBcBdvxRfTr93bjIECcBROMJBbBgbdxgna9Gq22ywYXg==
  • v=spf1 mx a ip4:50.201.33.130 include:_spf.saashr.com include:spf3.alegeus.com include:spf.protection.outlook.com include:hr360spf.smtp.com include:us._netblocks.mimecast.com include:_spf.salesforce.com ~all
  • vval0l3ilg2daec4pl7tfugcvc
  • 0ed1fe018a6bcf6ba78a684864ae92ca96d881d555
Cloud / SaaS Services Detected
Microsoft 365 Mimecast Salesforce

Leak Screenshot:

Leak Screenshot