Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

The Metropolitan Opera

metopera.org

Group Snatch
Discovered 2023-03-02 02:51 UTC
Est. attack date 2023-03-02

Description:

The Metropolitan Opera is a vibrant home for the most creative and talented singers, conductors, composers, musicians, stage directors, designers, visual artists, choreographers, and dancers from around the world.

Infostealer activity detected by HudsonRock

Compromised Employees: 2

Compromised Users: 875

Third Party Employee Credentials: 3


External Attack Surface: 50


Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • domain.operationsweb.com
MX Records
  • us-smtp-inbound-1.mimecast.com. Mimecast
  • us-smtp-inbound-2.mimecast.com. Mimecast
TXT Records
  • @facebook-domain-verification=v0cxh2fus7o893qfpq6q4z87y57dne
  • @nogg5hha4p2a50jubovr9et387
  • airtable-verification=59dba9da06973da47f75758889bddc56
  • apple-domain-verification=V6YX2R0auCgaeAYO
  • cloudflare_dashboard_sso=c8f0ef1ad6265e01df28acefef4777cd
  • docusign=bec25e54-d14b-4f2a-a8fe-59a69b1a0cf1
  • facebook-domain-verification=v0cxh2fus7o893qfpq6q4z87y57dne
  • goodnotes-verification=cc33c42a-c1c9-44a8-bfb8-7b6c509454a5
  • google-site-verification=MCPCCiv6zGgKScaX_vDlrzfkcG2K16uEjs51UHmm5Vo
  • google-site-verification=lvWF0weLZHN6vAiASl0SkLhH7yI-c56vxxj0YNajm9E
  • m00v1njlkfb8p8uo67i95ofi6
  • stripe-verification=7D1FC1F6C976FD8A0D3020E575A0D90C49AEF5547E3563F16E47AAA66D5CD6EE
  • v=spf1 redirect=c8zvgqf6._spf._d.mim.ec
  • wrike-verification=MTMzMjI0ODozNTAxZWYzOTJhMDg1MjhjOTZlZDQ3Y2QxNjlmYzU1ZGUzYTVkMDI3MTFiNmYwMzc3MTI5MDAxNGUyNjc1MmMy
  • 92ABsD5u1suzvbfx39rEUhH2z9mhjKR/klX/NIeLi8L/D8odI0j9B7aH2LdCHLzMtJL6J3Mqi1Ae+x3aNSME4g==
  • @d1j93qhirhe7hjpt4qu1os2u2b
Cloud / SaaS Services Detected
Apple Stripe Mimecast DocuSign

Leak Screenshot:

Leak Screenshot