Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Kensington Publishing

kensingtonbooks.com

Group Play
Discovered 2023-07-19 18:01 UTC
Est. attack date 2023-07-19
Country US
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Description:

New York, United States

Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 2

Third Party Employee Credentials: 0


External Attack Surface: 5


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain.operationsweb.com
MX Records
  • us-smtp-inbound-2.mimecast.com. Mimecast
  • us-smtp-inbound-1.mimecast.com. Mimecast
TXT Records
  • MS=ms51037258
  • P2A_61463_8
  • _i89n1ning86o9tc7bpa5uqn3omql0va
  • ca3-6386ed7662db48da917ba7753509d363
  • v=spf1 include:spf.protection.outlook.com include:amazonses.com include:us._netblocks.mimecast.com include:_spf.psm.knowbe4.com include:gateway.serverhost.net ~all
  • FUGE81RFD2Jiq+hNT9sFz/gUV7ZW03W/bFbBNBGwAZKrV8EcgqWy9q57Us1htdq13T/rRnti/N6SNAm8YCDAww==
  • LuvdvW3oicxMLVUEtNHTG9VsiSw/JeJ1lB4X8/RQf2FeI9exErtrX4emgYfkrSRTHh9YZQqqkC0pKuX4IAilAQ==
Cloud / SaaS Services Detected
Amazon SES/WorkMail KnowBe4 Microsoft 365 Mimecast

Leak Screenshot:

Leak Screenshot