Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

RFF.ORG

rff.org

Group Clop
Discovered 2022-12-22 20:02 UTC
Est. attack date 2022-12-22
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Description:

Resources for the Future—Healthy Environment, Thriving Economy

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain.operationsweb.com
MX Records
  • rff-org.mail.protection.outlook.com. Microsoft 365
TXT Records
  • 7qlikiq8njshk7fr62rasjep9e
  • MS=ms38944450
  • Nru0nEFCH8YtF5v4ECNas9f1b+TIw/3P1XxiAUxL8jJC0dsQe/zCXni3yIQbN0WPhIgJEs3Al0VXhZTBlIlW/A==
  • anthropic-domain-verification-nqkb90=x2TRY30DWPyTRSZyjhS5wYs8h
  • asv=ce64b23cf052e3688562a9b81e7fbc59
  • cp43uadr384i2ck28kdfodn00n
  • el064v5ru6uqhm1q9fg7mm8dkt
  • esmq7s828vae8frvdn1pjb8v1
  • google-site-verification=D8AHlwl1FcxrTRKFdc4LJ2S_76i3LuBSSVzCratxWMM
  • google-site-verification=VcvC5rR8w08VyctEkJJYaDIYAVc77h-YCpXC8PLycsg
  • v=spf1 include:email.prnewswire.com include:spf.fundraiseup.com include:spf.protection.outlook.com include:mail.zendesk.com include:_spf.google.com include:servers.mcsv.net include:mailgun.org ~all
Cloud / SaaS Services Detected
Anthropic Mailchimp Mailgun Microsoft 365 Stripe Zendesk

Leak Screenshot:

Leak Screenshot