Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

medibank.com.au

medibank.com.au

Group Revil
Discovered 2022-11-07 13:27 UTC
Est. attack date 2022-11-07
Country AU

Infostealer activity detected by HudsonRock

Compromised Employees: 11

Compromised Users: 1884

Third Party Employee Credentials: 4


External Attack Surface: 49


Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • mxa-0021ed01.gslb.pphosted.com. Proofpoint
  • mxb-0021ed01.gslb.pphosted.com. Proofpoint
TXT Records
  • google-site-verification=P9_ghWwvKtlgiQYWecJ2qjw4jrrl5y5FCont0AwpTdE
  • _m9yv4zhqkdiukwpkaz0yde67xvrlrwx
  • MS=ms25220638
  • google-site-verification=pCaL6pAch-z2svQG6Z94yCiFccuFEgJxedZXaiqTjtY
  • apple-domain-verification=CP5GHQyt8ZVQWeeA
  • loom-site-verification=2399e91799df45019ef517b1b0a91531
  • miro-verification=1f293e2f58cb8d23032d6efd7cb0fed8b4cd2e4f
  • atlassian-domain-verification=j1ERnidrjFKY1hVS8FtaLrceMGIQ9aS9xZHw0O/jtmH8scjsrfWmHoybB9Qmy8Rw
  • postman-domain-verification=700f922dfa0b11cbde7cb330a28d01bd698a2b9406c979a00dbccbe29caa54a9158f6fe82eb7b758935f0ca7079799e6a8f59a4b503603b2e0d163a310888898
  • cisco-ci-domain-verification=58c81dbd9c32e3aa7a56b4309aa0727a9e792e93adc9bae9266a990b4514675b
  • _xzdfuq0gqko93esfdy0xeyndfseqxlv
  • successfactors-site-verification=N2Y5MWE5YTc0OTZhYWFmYmY3MTVlMmI5NDM0YmUyYzA0Y2ZlYzY3ZTc1YjljYmM0MDNjM2ZhYmE2NTA1MDlhZA==
  • facebook-domain-verification=z8ouebk68ghw2ym6tk5anaj8hyxjye
  • successfactors-site-verification=ZDYyNTA2NzQ3ZWZjYmMwMzY3YTkzYjdjZDYwMWU2ZmY5NzJhZDI3ZmQxYWRiYTljY2Q0Yzg3YjAyYTY1MmZlNg==
  • docusign=e5ae6977-964e-44fb-a619-8689067cc2a0
  • v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all
  • esmn3QarSTBQQ5KwbBAh1Kkh20bjo9tNuzOBUVvp3LwMFvdAtcPevcuSFYqVk4oylUfFnnc6m1Ym5HtgAe88fQ==
  • msfpkey=1l4g812mwyi04r1r5noanqrbo
  • apple-domain-verification=1dSwuCS_ch-GgRZlvyw6xDH2TmzQUhhR5lTtvETdlEI
  • globalsign-domain-verification=9DFCE0943F53E86131EC855B83E9E8C3
  • globalsign-domain-verification=73dc2aba23ed4047598ec008822641d0
Cloud / SaaS Services Detected
Apple Atlassian Microsoft 365 Miro Cisco DocuSign Proofpoint