Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

deerfield.com / singulargenomics.com

deerfield.com

Discovered 2025-09-11 05:22 UTC
Est. attack date 2025-09-10
Country US
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Description:

================================================================================================ deerfield.com Deerfield Management ("Deerfield") is an American investment firm headquartered in New York City. It is focused on making public and private investments in the healthcare and biotechnology industries. Deerfield is considered to be one of the largest dedicated healthcare investment firms in the world. ================================================================================================ We hacked and compromised one of the many laboratories belonging to Deerfield: ================================================================================================ www.singulargenomics.com A Singular Focus on Advancing Science and Medicine Our aim is to empower scientists to answer their most pressing questions, allowing them to forge a path of discovery without limits. Our commitment is to serve the scientific community through continuous and thoughful genomic innovation that's driven by real-world feedback and solution-oriented development. ================================================================================================ We downloaded about 20 TERABYTES of data from servers and Amazon storage. Including experiments, software sources, AI data, as well as research for the company's clients - fox chase, GeneDX, Juno, lexogen, HARVARD, siemens, and many others. Soon, anyone who wants and understands the issue will have the opportunity to study in detail the activities, research and experiments of this company. And to see who and why they are conducting their experiments in the field of gene engineering. Maybe it will become clearer why Deerfield is buying up pharmaceutical laboratories and what they want to achieve in the end. What do gene laboratories and government universities have in common? Everyone will soon be able to discover a lot of questions. ================================================================================================

Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 3

Third Party Employee Credentials: 0


External Attack Surface: 3


Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • deerfieldpartners-com.mail.protection.outlook.com. Microsoft 365
TXT Records
  • krisp-domain-verification=YotKazDT0aVmKVqOdaZ8QKjb9qM5Px2M
  • g9m1bjnmbku8sjhcfqnns0nhlp
  • scfjtqtmjhkdlmqie77sbjhoa9
  • _rwhg9gqfqm11hum2ixiq9m1splbha5m
  • 4bf0nqp3t2ju01ubtrm1aq47ce
  • 9ltm11iq5f53mo9fkuqdpv2u26
  • 82rhturkt83ae3p4l25tf4det5
  • notion-domain-verification=SBNFmkjgY81i6Wul7C3KDuBeZ754GU2YKSGzBmV3Apr
  • MS=ms87773767
  • cursor-domain-verification-8matsq=ExM1kSDcRaGGrczMqnR16Eabh
  • atlassian-domain-verification=5emnMlADStSrZKbwNCRSw6mBk9pqXXeUfHpnQImMqJs76exnunVnemg7UfaiThsg
  • LnsxaFplintUMkcdN6zZ//GncDrZPLeYIHFhztEOF5aKwwtBs61YRrbLTJfzUJogHlW4UOuT9DzyuLYtWFXQjA==
  • vjp5ch8kof7roau7ga1iv047qr
  • cisco-ci-domain-verification=75acf42cd5a86f67b0e20472def336176314c9d4b5315e1f045574666bc6e44f
  • webexdomainverification.O12U=194332fc-741b-473c-a2ed-e3e0847469a2
  • v=spf1 ip4:38.105.163.2/32 ip4:216.71.150.115 ip4:38.88.4.50 ip4:38.105.163.45/32 ip4:216.52.6.88/32 ip4:216.52.6.188/32 ip4:66.151.215.25/32 ip4:208.64.179.135/32 ip4:24.246.125.195/32 include:_spf.elasticemail.com include:spf.US.exclaimer.net include" ":clientspf.backstopsolutions.com include:spf.protection.outlook.com -all
  • HnHfp2cFeP/IYa0ry3q/rdlOg/FX0Znrk/HSHpl5c+GQeKEXcjywR2Nov9DG9PzX36pRjriVYg0yp9RtyrfE3g==
  • anthropic-domain-verification-5n7egp=lt195oQHfG7gOYe1tOuU1vbWk
  • openai-domain-verification=dv-mN378A8JRzJjCdBFLo9UbEWX
  • affinity-allowed-subdomains=deerfield
  • google-site-verification=zelRnfEQDw61Xxhx6TjOrNLLCb7RpwxH54SP6Lbz4nY
  • 28952457-6245-4eca-862d-27c50665cd30
  • 4rehcqlrhlrh9tb5kig2o3e1cv
  • zzngrr4tl6cq0t04g87r9q9yx49zq5yz
  • lovable_verification=tjvdsb5fww882O5I5gxZ
  • apple-domain-verification=vA7cdXVVk12hUgFo
  • GIguWfQaQqLdEohufSVmyR50C5scEDb/HbNmMYzGqp9oAfz3mS1Fe8zcApoWONaLJ7S9dqD7Uyl4epXAwBBl2w==
  • 1password-site-verification=FWX4HSLBV5EWBP4EOYQYP24JCQ
  • wiz-domain-verification=af496a139926ef8ba6baaea116a950c9c53d60c99bf7200cbd4d46a60495ca95
  • 755E8D5D2069AE730C1B4A13699826BBB41667496B984613FF5EECD4498E3A35
Cloud / SaaS Services Detected
1Password Anthropic Apple Atlassian Cisco Cisco Webex Microsoft 365 Notion OpenIA Wiz

Leak Screenshot:

Leak Screenshot