Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Samhwa Paint Ind. Ltd

samhwa.com

Group 8base
Discovered 2024-04-03 05:54 UTC
Est. attack date 2024-04-03
Country KR

Description:

Samhwa Paint Industrial Co., Ltd. is a Korea-based company engaged in the manufacturing of paints.samhwa.com

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • jujuya0705samhwa.com
  • abusewhois.co.kr
MX Records
  • cluster1.us.messagelabs.com.
  • spam.samhwa.com.
  • cluster1a.us.messagelabs.com.
TXT Records
  • S0A3M51612
  • MS=F175AB0DF6BED1AA15B8A47A124FE3557AC415B4
  • _globalsign-domain-verification=kpAfNbPuU34BjqfU2ReEh01NrnP4VwxX5B2Y1pbjLy
  • _globalsign-domain-verification=SiogTOk5SJb2QsTxreNikH0QyiSy02p8UhqtU0nvFd
  • v=spf1 ip4:220.78.114.5 include:spf1.amazon.com include:spf2.amazon.com include:amazonses.com include:_spf.salesforce.com include:spf.messagelabs.com ip4:13.124.111.122 ip4:220.78.114.38 ~all
Cloud / SaaS Services Detected
Amazon SES/WorkMail Global Sign Salesforce

Leak Screenshot:

Leak Screenshot