Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks


Group Malas
Discovered 2023-04-09 14:57 UTC
Est. attack date 2023-04-09
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Description:

using Zimbra vulnerability

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • tspckgg9s53cprivacy-protection.email
  • xyaf7kbwaeo2privacy-protection.email
  • jjcwhdkw6ttuprivacy-protection.email
  • abusedomainnameshop.com
MX Records
  • smtp.google.com. Google Workspace
TXT Records
  • v=spf1 ip4:69.10.51.0/24 ip4:178.248.238.0/24 include:_spf.google.com include:spf.nanocad.ru a:hmail.jitbit.com a:hmail2.jitbit.com ~all
  • yandex-verification: 55ab674808f3603b
  • google-site-verification=-vpfcGVmpkp4VjjK7fI0L7YiNztONURUE9Q43Fn0UIA
Cloud / SaaS Services Detected
No well-known cloud or SaaS service detected.

Leak Screenshot:

Leak Screenshot