Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

www.l3harris.com

www.l3harris.com

Group Abyss
Discovered 2023-05-15 19:50 UTC
Est. attack date 2023-05-15
Duplicate Entry
This victim has been identified as a duplicate of another entry in our database. However, this may not always be the case: the same organization can be targeted multiple times by the same or different ransomware groups, which may result in separate legitimate entries. Search for related entries

Description:

17 VM from wsots.net (Wideband Satellite Communications Operations and Technical Support)

Infostealer activity detected by HudsonRock

Compromised Employees: 11

Compromised Users: 105

Third Party Employee Credentials: 50


External Attack Surface: 36


Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • mx.l3harris.com.
TXT Records
  • v=spf1 ip4:128.170.196.0/25 ip4:192.52.235.128/28 ip4:128.170.61.64/28 ip4:192.52.235.32/27 ip4:128.170.207.0/24 ip4:35.169.203.92/32 " "ip4:52.227.183.169/32 ip4:52.227.164.238/32 ip4:128.170.60.25/32 ip4:192.160.117.25/32 include:spf.protection.outlook.com include:customers.clickdimensions.com -all
  • _globalsign-domain-verification=esDvs5Msz39F5o97VaHcZxyKR4A6NPHRpuo9du1Tro
  • _z4xsoaotcve6mtlb299msl1gl4ue6yv
  • google-gws-recovery-domain-verification=71992948
  • adobe-idp-site-verification=161231e151b6467d1362c69b682df071a916ac1f7b02dbed0140b6ccf2a4ff44
  • data-" "atlassian-domain-verification=IbKMJpkj7Sh/jObp6moz9GSrZflgZaLm6L8yF7jaF95OpxFiS8GrjrRjMrC9aNWF
  • docusign=68777e8a-d2a7-4aaa-9deb-530c7c85eebe
  • amazonses:a1LyDstgsN6RAuHGiapOvWzyaHSLNhxjPS0T9as63yI=
  • ZOOM_verify_Ngh9oo3rQL-CWBGe1x86mQ
  • MS=ms54449370
  • _5l0zr0sg4gzn9s8wddhzgkbllefvk8h
  • hpe-greenlake-domain-verification=75707439582d56455861454734535570475231624f7554447752507449596262
  • google-site-verification=lkU-t-APzWMkpQRSFyzwcjcQLG4a784ab4dVC4X2t7I
  • rvd4cjkq7hvbesa6gbjqhbs941
Cloud / SaaS Services Detected
Adobe Atlassian Amazon SES/WorkMail Global Sign Microsoft 365 DocuSign Zoom