Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

AUSENCO.COM

AUSENCO.COM

Group Clop
Discovered 2025-10-27
Est. attack date 2025-10-27
Country AU

Description:

[AI generated] Ausenco is a global engineering and consulting firm based in Australia. The company offers services in minerals and metals, process infrastructure, program management, and environment and sustainability sectors. Clients range from the mining, oil and gas, industrial and infrastructure industries. With more than 30 offices worldwide, they aim to innovate for better, sustainable solutions.

Infostealer activity detected by HudsonRock

Compromised Employees: 6

Compromised Users: 73

Third Party Employee Credentials: 67


External Attack Surface: 28


Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • 666d2c9c-086f-4644-8b32-60c24c89a42e@identity-protect.org
  • trustandsafety@support.aws.com
MX Records
  • mxa-002ffc02.gslb.pphosted.com.
  • mxb-002ffc02.gslb.pphosted.com.
TXT Records
  • solarwinds-service0desk-verification=a533e7adb56700f74f39c5c7ff32a138
  • spycloud-domain-verification=af17591b-589d-4a44-ac01-a165f6a40b37
  • tqninleu7tm2qdefh5o04cb8i8
  • v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all
  • a7733916234e1f4759286105b81c8bed5274874a7c776e9f87
  • apple-domain-verification=Kk1lP9KdMPiSdRtL
  • atlassian-domain-verification=3a7raaELzH3QAg9mQkKoqk50GsaZR/akaVPIaxbAITOZl7carvGbc8driLCYCq4j
  • d365mktkey=MSweIdSK0NYE454AUHxNXRGAp8AlP0EEkGlKMqncfQUx
  • jamf-site-verification=-K9s9LxGuzQ0uSXBhY03kw
  • o5qv55b0dqpiesen3rfobn4vq2
  • solarwinds-service0desk-verification=5a3268284e9f6265111ebdc7a662b44c
Cloud / SaaS Services Detected
Apple Atlassian JamF Proofpoint

Leak Screenshot:

Leak Screenshot