Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

extramarks.com

extramarks.com

Group Killsec
Discovered 2024-10-10
Est. attack date 2024-10-10
Country IN

Description:

Discover a new era of education with Extramarks. Our innovative digital solutions empower schools, teachers, students, and parents to revolutionize the way they teach and learn.

Infostealer activity detected by HudsonRock

Compromised Employees: 97

Compromised Users: 8174

Third Party Employee Credentials: 34


External Attack Surface: 168


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuse@godaddy.com
MX Records
  • webmail.extramarks.com.
  • mx1.hc883-1.ap.iphmx.com.
  • mx2.hc883-1.ap.iphmx.com.
  • extramarks-com.mail.protection.outlook.com.
  • outlook.extramarks.com.
TXT Records
  • google-site-verification=YhVfLtnps2szymEWcP740-03KEElJ-z3kKGcaes2lTU
  • google-site-verification=gx_M-AdBlEQ1MYETs0TbvFnqMLMB4X9Ceus8xsftCys
  • google-site-verification=nH9PzWH5x-xCkKaGwPY8ceOfa_WoahjlFUokj2Jc14I
  • google-site-verification=wCdMsI8z05gNZFhQMXjIFH_eqIQZPugmzunDqazngJE
  • t0uh326qbk60d7hmd3orf6fhav
  • v=spf1 a mx include:amazonses.com include:spf.protection.outlook.com exists:%{i}.spf.hc883-1.ap.iphmx.com include:spf.gonetcore.com -all
  • MS=ms12540052
  • MS=ms13081642
  • MS=ms36367301
  • amazonses:eFbTx9wqI4Xd2CrIfwmEaCIlV0xYsGCmr5yjWNAvBCU=
  • facebook-domain-verification=cn9nutan0ov9dgpvkfkksi2kzwlwne
  • google-site-verification=12rB3iPCwq-PBbA0Zl1e1w3TloIqmLgxybj0DQ8t51U
  • google-site-verification=JZfcBTJ98McQ37HgTyP7yVgiljC5ItUqO2WIptvx7Gw
Cloud / SaaS Services Detected
Amazon SES/WorkMail Microsoft 365

Leak Screenshot:

Leak Screenshot