Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks


Group Rhysida
Discovered 2025-10-21 18:37 UTC
Est. attack date 2025-10-21
Country CA

Description:

Peraso

Infostealer activity detected by HudsonRock

Compromised Employees: 6

Compromised Users: 0

Third Party Employee Credentials: 6


External Attack Surface: 8


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • d98d427ca3b38e2f1ded02fbcd7b7b4f5c3ccb693ed3baf10a9026c3483c15acperasotech.com.whoisproxy.org
  • d98d427ca3b38e2f1ded02fbcd7b7b4fe9f33a57b9127fabbe7315020f05ff68perasotech.com.whoisproxy.org
  • d98d427ca3b38e2f1ded02fbcd7b7b4fa05792d894b902648f630178814506b4perasotech.com.whoisproxy.org
  • d98d427ca3b38e2f1ded02fbcd7b7b4ffd32a298710ccf3b9afab9ee6709a491perasotech.com.whoisproxy.org
  • trustandsafetysupport.aws.com
MX Records
  • perasotech-com.mail.protection.outlook.com. Microsoft 365
TXT Records
  • g6uL9ss7kOBbCvQAex7DIXiaJSxhXr
  • v=spf1 ip4:206.223.176.122 include:spf.protection.outlook.com -all
  • zoho-verification=zb60819772.zmverify.zoho.com
  • 1password-site-verification=V4XGDBVWR5BADMSHP32TPSETQY
  • atlassian-domain-verification=a2OY29+xQHOULqDGxdJ6NrzTbJBbgw5PZasETUJC7OOU8OketPO1S8zyZOMUryIo
Cloud / SaaS Services Detected
Atlassian Zoho Campaigns