Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Mandarin.com.br

mandarin.com.br

Group Babuk2
Discovered 2025-03-10 19:23 UTC
Est. attack date 2025-03-10
Country BR
Duplicate Entry
This victim has been identified as a duplicate of another entry in our database. However, this may not always be the case: the same organization can be targeted multiple times by the same or different ransomware groups, which may result in separate legitimate entries. Search for related entries

Description:

Mandarin.com.br

Infostealer activity detected by HudsonRock

Compromised Employees: 2

Compromised Users: 4

Third Party Employee Credentials: 4


External Attack Surface: 4


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • alt1.aspmx.l.google.com. Google Workspace
  • alt2.aspmx.l.google.com. Google Workspace
  • aspmx.l.google.com. Google Workspace
  • alt3.aspmx.l.google.com. Google Workspace
  • alt4.aspmx.l.google.com. Google Workspace
TXT Records
  • apple-domain-verification=FgQjJW7anKF6GyjN
  • google-site-verification=ZRHhh9StWWJEPS0BFJtTAfpX2Am9OozvXbASM7n7b8Y
  • teamviewer-sso-verification=1cef2a39aaa14124a82d439a5b6856fa
  • v=spf1 include:spf.mandrillapp.com include:_spf.google.com include:servers.mcsv.net ~all
Cloud / SaaS Services Detected
Apple Mailchimp Teamviewer Mandrill

Leak Screenshot:

Leak Screenshot