Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Aurora Public Schools (aurorak12.org)

aurorak12.org

Group Fog
Discovered 2025-02-11 16:24 UTC
Est. attack date 2025-02-11
Country US

Description:

171 GB

Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 211

Third Party Employee Credentials: 211


External Attack Surface: 0


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain.operationsweb.com
  • n52sk6nk83vnetworksolutionsprivateregistration.com
MX Records
  • aspmx3.googlemail.com. Google Workspace
  • aspmx.l.google.com. Google Workspace
  • aspmx2.googlemail.com. Google Workspace
  • aspmx5.googlemail.com. Google Workspace
  • alt1.aspmx.l.google.com. Google Workspace
  • alt2.aspmx.l.google.com. Google Workspace
  • aspmx4.googlemail.com. Google Workspace
TXT Records
  • google-site-verification=d3UOaQGDxBhjHCXthBfb7iz03ZFWiOfFL0uiZ7h6MnU
  • adobe-idp-site-verification=5258245c644f84f9451f1c8e93efcaaacbcaf93a7c0eb3c8111b778e6f72ece8
  • google-site-verification=nabB-9zeuC-H8sWqJ8DaV3gvJ3Vrqtq7Gu92UntGd7Y
  • google-site-verification=IRJ_YHbx1VN_pvOuFlOAA9jTPpSTIrmrOrw5dpmEAgE
  • apple-domain-verification=47qD511bBGsC9P5j
  • docusign=c92459ff-bd56-4b1c-9334-372f8ec7e395
  • google-site-verification=jNePXdu6lmGrKAkuRusPoCWOFWTYABd2M73nyVlkSvA
  • adobe-idp-site-verification=d4e7a4693cef9aa7f16e481c9b9582c0d050fb80a09e63330a6b47feb786fd7c
  • logmein-verification-code=4d7c8a28-9fa6-4adb-bd49-0a8d67f11ab8
  • v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all
Cloud / SaaS Services Detected
Adobe Apple LogMeIn DocuSign

Leak Screenshot:

Leak Screenshot