Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

grantierra.com

grantierra.com

Discovered 2023-05-28 18:50 UTC
Est. attack date 2023-05-24
Country EC

Description:

Gran Tierra Energy, founded in 2005 and headquartered in Calgary, Canada, is an oil and gas company focused on exploration and production in Colombia and Ecuador.More than 150 gigabytes of data, including passports of directors, employees, compan...

Infostealer activity detected by HudsonRock

Compromised Employees: 35

Compromised Users: 1

Third Party Employee Credentials: 21


External Attack Surface: 12


Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abusegodaddy.com
MX Records
  • grantierra-com.mail.protection.outlook.com. Microsoft 365
TXT Records
  • Q89BXKT1HNTHGU5QNE4BKE7UN8JFOUMKLT4TWKT5
  • apple-domain-verification=F6jT3sJv47YhjYez
  • v=spf1 ip4:20.151.73.148 ip4:69.46.107.219 ip4:149.72.231.47 ip4:149.72.196.66 ip4:20.151.73.148 ip4:20.151.73.148 ip4:52.233.37.155 ip4:208.68.91.166 include:spf.protection.outlook.com include:spf.zohomail360.com -all
  • grantierra.com.co
  • brevo-code:08e6aec8456cba698248f1ea18787c75
  • docusign=fa6436b3-01ac-47f6-a26a-078e9fe58e18
  • _esnm4zxrhazyd0v8gd1ostf014yob5r
  • MS=E6D0B3D5D1FF63A4827F0EC8C9A4B17D2CFCE5B0
Cloud / SaaS Services Detected
Apple DocuSign

Leak Screenshot:

Leak Screenshot