Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Nike, Inc.

www.nike.com

Discovered 2026-01-22 17:15 UTC
Est. attack date 2025-12-16
Country US

Description:

[AI generated] Nike, Inc. is a globally recognized sports apparel and equipment company headquartered in Beaverton, Oregon, USA. Founded in 1964 as "Blue Ribbon Sports" by Bill Bowerman and Phil Knight, it officially became Nike, Inc. in 1971. Known for its iconic "Swoosh" logo and "Just Do It" slogan, Nike offers comprehensive collections of sportswear, sports equipment, accessories, and services for a variety of sports.

Infostealer activity detected by HudsonRock

Compromised Employees: 268

Compromised Users: 508440

Third Party Employee Credentials: 558


External Attack Surface: 200


Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • internet.domain.administratornike.com
  • abusecomplaintsmarkmonitor.com
  • whoisrequestmarkmonitor.com
MX Records
  • mxa-001b6002.gslb.pphosted.com. Proofpoint
  • mxb-001b6002.gslb.pphosted.com. Proofpoint
TXT Records
  • wiz-domain-verification=3cb6d690698de9ba2001d69ed35811baa3f917302293875949b7d863d1bf8b27
  • validation and verification zone
  • atlassian-domain-verification=pJlgODoOXqMpfPHoasf4sPWDltyOP4cWVg6ptKTMfoozopE7QCq/a8TYq65TmOxv
  • google-site-verification=AqwT-_WzscdFOiacOoMpw-aMjwRDmJLuT9cHH3zFfkw
  • stripe-verification=c814f4607c0171c39868805fb1ae7723a2d91d54b0c3149eb8ec46aad7a7be6f
  • _3m4ex27y3mflwhlg4u1tmecdcn5ybcr
  • Validation no ext
  • 6IHSYqvkFCDiMubO/Czv+XdVcUWb8weKG9uyqn9Kh0u3RZwA+xx73W/f+iQrSciT+peqOK3yNcx1jsIqsHgY+g==
  • paloaltonetworks-site-verification=4c8489dbb0f064d060aa162bea54173b49b6b9ff55dc915135fe88647087b7ee
  • vmware-cloud-verification-b6516934-01c2-4ad1-bedd-11420be6e415
  • google-site-verification=0tcT2lcGC5FZjgDR2BU_t4PwfRpG5TdMC3W7Uq8tleI
  • rhino_accounts=f8b043ccf0f03789479ad9ba4d169b0d
  • adobe-idp-site-verification=6f949b65-8b97-4bb1-be7a-6088c7b96a98
  • docker-verification=278531f6-37fe-485c-89db-334e7b913aa0
  • Dynatrace-site-verification=3767faff-af76-492b-b89a-8a131cf04b79__c6r5amr4k70b0if4kb7758iej7
  • soa header update
  • google-site-verification=Ot6fp-6zJPJw5lHQXZm5Lhs3nCmRp7EW2eHn5htn_3A
  • _globalsign-domain-verification=oTFxDWw1mdzzP-Zd45wwC6Ifc6nSakWOmRQSYD_XHz
  • mongodb-site-verification=POJ3Ib5m6oOyqX91ZrlgcbAFVKwRhMml
  • google-site-verification=JjQcml7P2JjvkTRFwUtkeEGy6-Pehs-zJ3YC2bVcCp4
  • apple-domain-verification=FIPflKu9G6kEqyab
  • facebook-domain-verification=9qrf9w3jjvoc7r3ry2mv6fds4qd9jd
  • validate post vanity
  • atlassian-sending-domain-verification=addc73ef-6fc8-4d74-a015-9b63ec7809a1
  • _z9yb4dkbcwn7z68zbmcju1hzw2bdtx9
  • cursor-domain-verification-gba5jn=lRd0T4XTIOjBR3FYBvBcEMw9k
  • cloudhealth=a8cf6829-a2b8-4f9f-9945-f71659ede7ff
  • scnv-verification=03fe4bf81654621682a5c049867fccb4:4fa32facf3797aa643beb4108a6c956c:d986a0a5e1ca4ceb8941e8d9ed54eb11
  • vizcom-domain-verification-athga5=ds19jN3O5UWdzylSOLtvX2QN6
  • stripe-verification=3e045226dd7579f3fea910186ec8aee832e44fecd5d5e89f690efed18c3f38fd
  • 52b0ba4a752984fe5aadf8307d978aaad69cc5e0dc654a2f6f011c210bc3d0f8
  • amazonses:guDcMedRx3D3yaitJGO/aV+NzhugJRiKDDdKbUXqbLM=
  • cisco-ci-domain-verification=7ab30713f81d07c44eea6bc370f3a51f2ca7d6c0477a8db10974320ec4bef38f
  • ZOOM_verify_sCcWC00VT72Xd3cKn3ByDQ
  • github-verification=9rQmuxzyEyx4yq7LjueTPBmTFPNf9xcMKDBpDkkw
  • dtm-domain-verification=LmCPecEAhn9C-gGneNj_stFVbTTrES0EtZTslr2YF2c
  • MS=ms93873368
  • pendo-domain-verification=suZZiVajeuV3K-TVqdF0B7QS9o0
  • v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all
  • 4784qfgb1p5cygmgsszmv4bnfqmk7kct
  • jamf-site-verification=aIUTcaWCojh8ldgWpayjCg
Cloud / SaaS Services Detected
Adobe Apple Atlassian Amazon SES/WorkMail Docker Global Sign Microsoft 365 Stripe JamF Cisco Proofpoint Zoom

Leak Screenshot:

Leak Screenshot