Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

ekiconsult.com

ekiconsult.com

Group Dan0n
Discovered 2024-05-28 21:20 UTC
Est. attack date 2024-04-26
Country US
Duplicate Entry
This victim has been identified as a duplicate of another entry in our database. However, this may not always be the case: the same organization can be targeted multiple times by the same or different ransomware groups, which may result in separate legitimate entries. Search for related entries

Description:

The total size of stolen information is 1TB. This leak contains corporate information of the company: Financial, legal, information on employees and partners. Information on clients was also received:...

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abusegodaddy.com
MX Records
  • ekiconsult-com.mail.protection.outlook.com. Microsoft 365
TXT Records
  • google-site-verification=jLFNC9UQ-yl2tNJ9ij-L01PRnV2Gio1ZCaLM3a_ycwk
  • v=spf1 ip4:104.198.97.195 ip4:35.185.32.151 include:spf.protection.outlook.com include:_spf.samanage.com ~all
  • mb8rm09hn0bra26pcufkcuj1t5
  • google-site-verification=svI-At2uJk0rPJx2oQG3fZ7VURVO5nVR1QPtihARB6g
  • logmein-verification-code=l2CSfBDzqS2YWaQFpa4sTPewB
  • MS=ms66961545
  • solarwinds-service0desk-verification=16d1e0e17dbf1f02bab5e589b30ff2a3
Cloud / SaaS Services Detected
LogMeIn Microsoft 365

Leak Screenshot:

Leak Screenshot