Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

UniCursos, Brazil

unicursos.com.br

Group Tengu
Discovered 2025-10-23 19:15 UTC
Est. attack date 2025-10-23
Country BR

Description:

UniCursos, Brazil - Offers preparation courses for public sector exams in São José dos Campos and surrounding areas in the state of São Paulo.

Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 23

Third Party Employee Credentials: 3


External Attack Surface: 5


Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • mail.unicursos.com.br.
TXT Records
  • v=spf1 a mx ip4:92.249.45.53 include:relay.mailchannels.net include:_spf.kmitd.com ~all
  • google-site-verification=IHhgkykEp0fJFtagR7VAJmPUSh2HqNrN90jxtqEGtF8
Cloud / SaaS Services Detected
No well-known cloud or SaaS service detected.

Leak Screenshot:

Leak Screenshot