Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

FUGRO.COM

fugro.com

Group Clop
Discovered 2022-12-22 20:02 UTC
Est. attack date 2022-12-22

Description:

Global offshore and onshore geotechnical and survey services

Infostealer activity detected by HudsonRock

Compromised Employees: 76

Compromised Users: 584

Third Party Employee Credentials: 146


External Attack Surface: 100


Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abusereportkey-systems.net
  • abusekey-systems.net
  • domainsnovagraaf.com
  • infodomain-contact.org
MX Records
  • mxb-0002cd01.gslb.pphosted.com. Proofpoint
  • mxa-0002cd01.gslb.pphosted.com. Proofpoint
TXT Records
  • MS=ms86584078
  • lovable_verification=B4jvBHK4AoRZHtOpmKqW
  • autodesk-domain-verification=LAcqBDeduvSNCkUi819W
  • 51633224bc924147a1355ba44b12833c
  • d365mktkey=4fdcnlw7xnat45a15sf1jlcso
  • apple-domain-verification=9XyBsvDVI18zrqoX
  • amazonses:h9PDC7xncUTaQPR9bQUvdcvSvOYd3v3jzqHKYMx/g6E=
  • msfpkey=1cun36d726kodl08cbljl4djp
  • autodesk-domain-verification=IBkZj0ynoJmmDwcnQTX-
  • miro-verification=713718be322527229e6d03a4d341f0d08c393157
  • figma-domain-verification=51f6902e5ae20c2875e83d9a7db6b9efc78cba13b928d395f00d41720776ab1b-1743062595
  • parsec-domain-verification=td_2kH9HFOIHDyFpxtZ1SH6BS8wLJ9
  • anthropic-domain-verification-eq7c5r=PoZzIoH9W0xODtV6F80BnztAF
  • 97447d8a819f36cc4199e66918cd381c24c2bd247bfdfd68e0
  • paloaltonetworks-site-verification=82441873f546aaf8c9b65c662e1c72766c79cab2d68dbb12b8f964c6764e6ccd
  • atlassian-domain-verification=shtB7j2KMrU5aVFCdxTDaKN23WvY9QILlCtqoYGdNxYzSrZBw6x7BF3MJbRypW7v
  • v=spf1 include:spf-0002cd01.pphosted.com include:_u.fugro.com._spf.smart.ondmarc.com -all
  • heybEvMBRfU9995F5IdFO/vMpyiMINfkGL4iqSMGsMBmfJaqQMyW4OrhusKuUZiNwprfRaIVv6GxMDK1AH7+Lw==
  • K48H3PEF4HIAV1L0L1TJZDEDMWBCR21P5FYA843B
  • anthropic-domain-verification-kfzgdb=6RfYtW6R1Ue5aU4a3XqCKNYou
  • asv=25460916558990ca1b3ef24aac4ce88b
  • dzv45gvtsrlkrf9gqqp749r2tsfwmhcb
  • W51MiZTacUAZ51f6ZZx4hYjIVO55ay0rl9md/Tn1ofHw30fDXpKyr/OZR7rgfZRACAPDUbr54l236FexvBG4fA==
  • shtB7j2KMrU5aVFCdxTDaKN23WvY9QILlCtqoYGdNxYzSrZBw6x7BF3MJbRypW7v
  • sTnsE+M5kuOOu4ZfaxNNkPDw/CsVWdOyIjmqupdi26QtYmNBl0fQRbYePJrKOtC6+oC3SUI5iBj5wKqROsiHIA==
  • google-site-verification=DCuL3kMVAVyd1VNQkM9zYzmzlQRM8s8LwJvd2tjYJOQ
Cloud / SaaS Services Detected
Apple Atlassian Amazon SES/WorkMail Microsoft 365 Anthropic Miro Autodesk Proofpoint

Leak Screenshot:

Leak Screenshot