Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Metro Supply Chain Group.

metroscg.com

Group Qilin
Discovered 2025-02-24 13:55 UTC
Est. attack date 2025-02-24
Country CA
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Description:

We have balance sheets, billings, budgets and other financial data and employee personal data ... Data will be published on our blog in 5 days...

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain.operationsweb.com
MX Records
  • metroscg-com.mail.protection.outlook.com. Microsoft 365
TXT Records
  • amazonses:vRkaDaepE+lqECL+GpENbnoEOKz9sqdPEAJ1aVBpuH0=
  • _bija7msir8qzk9r8mmn1tf3urudrbgx
  • airtable-verification=87608f335dc73b8fd70c46ec27ab0808
  • google-site-verification=W147kKUAiVNSEFMJ3elQlD2sPYEv7NJy5frK8PLfnRA
  • smartsheet-site-validation=iE0ZinedwRF_pJsznHn4PRTd4otS3U8g
  • google-site-verification=xgvveusepovTJxSLHiTzcp8-j821WnOkDeSt-0y_O5I
  • v=spf1 ip4:199.68.178.41 ip4:20.151.67.39 ip4:68.169.20.242 ip4:65.110.190.233 ip4:65.110.190.239 ip4:206.51.252.69 include:43602027.spf10.hubspotemail.net include:_spf.sendergen.com include:spf.protection.outlook.com include:mail.zendesk.com -all
  • _rk8nm0m25lf97vrnuk94doqq96a6udx
  • apple-domain-verification=Vr2dPWNHaLzaffzz
Cloud / SaaS Services Detected
Amazon SES/WorkMail Apple HubSpot Smartsheet Zendesk

Leak Screenshot:

Leak Screenshot