Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Questel SAS

questel.com

Discovered 2026-08-02 00:00 UTC
Est. attack date 2026-08-01
Country FR
Sector
Not Found

Description:

Over 21 million Salesforce records containing some PII and 147GB+ of internal corporate data was compromised. This is a final warning to reach out by 4 August 2026 before we leak along with several annoying (digital) problems that'll come your way. Make the right decision, don't be the next headline.

Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 10

Third Party Employee Credentials: 6


External Attack Surface: 12


Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abusereportkey-systems.net
  • abusekey-systems.net
  • infodomain-contact.org
MX Records
  • mxb.germany.inbound.cf-emailsecurity.net.
  • mxa.germany.inbound.cf-emailsecurity.net.
TXT Records
  • google-site-verification=AKUc2YlpOjMBYwoUP2ERydZolzBweCEjZcHQobev03o
  • ca3-a59f08609b31457e92e3807a0bebdf0c
  • v=spf1 ip4:217.13.58.75 ip4:217.13.58.66 ip4:207.245.102.254 ip4:213.182.36.248 ip4:149.72.182.83 ip4:167.89.97.249 ip4:207.245.102.110 ip4:207.245.103.110 ip4:91.235.242.5 ip4:126.143.190.201 ip4:113.149.253.71 ip4:87.129.21.194" " include:sendgrid.net include:_spf.salesforce.com include:aspmx.pardot.com include:spf.protection.outlook.com -all
  • _7djeczgk7ch14kpw0tb7ez9ksx04cqm
  • apple-domain-verification=RbovxissNY1783SQ
  • atlassian-domain-verification=/OYmzJKsF9Hz67kydghivjRXBlEerX0lDA75nDIg7Obzvusrdkuxp0PtRxSqSkZh
  • deepl-domain-verification=d8d39ec210a4417cab3632033bed5374
  • pardot438662=7f56c0befbb7fe595a9b013bbcbbbd83f4d3098ee9b090fabb830b2a14c9da3f
  • adobe-sign-verification=b88a522c66390495fd59962579b65a49
  • anthropic-domain-verification-b7w9eg=z7pNSSShBatp0xIfX40Ny2hQw
  • miro-verification=e84aa022006ec19af771483b42aa4c27555f05c5
  • teamviewer-sso-verification=e60a49ee0bae4f7a8fd0340cfbe0a352
  • vmware-cloud-verification-035117c4-f9fe-47ac-ac8b-01c494ef2937
  • dropbox-domain-verification=qiczg8cwjs1s
  • bw=xbZqeFRUFEOCLzY5sLwUX2AkZzBIjrxZl/YAbvAI9BNI
  • adobe-idp-site-verification=5ceca8ef708ab4a7a72e926692de0741612603f43059f84474964248cbabdb80
  • mCe1VALKbTCHdYz+B3j9DMM5ueubdpymd6jDy5aR+Pqm06fuf+8JJXUsZeu7VfZu61pbl5CVBm/wfY+e/aW/iQ==
  • pardot438662=17a766bec7079d9bcf35b9cd850b227e6741b0e8b254eeeace864c34462e3384
  • jamf-site-verification=J0It5PnFOOCm0KBf2GIWKQ
Cloud / SaaS Services Detected
Adobe Anthropic Apple Atlassian Box Dropbox JamF Miro Salesforce SendGrid Teamviewer