Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

cxm.com

cxm.com

Discovered 2024-02-04
Est. attack date 2024-02-04
Country US

Description:

Chicago Extruded MetalsFinance (budget, audit, cash flow, balance sheet, tax returns, project calculations, YTD reports, bank statements and many other financial documents) Employees (personal data of employees, contracts, information on salaries,...

Infostealer activity detected by HudsonRock

Compromised Employees: 0

Compromised Users: 1

Third Party Employee Credentials: 1


External Attack Surface: 0


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • e7e1807e-1f8a-459f-a94b-7f224bb41a39@identity-protect.org
  • trustandsafety@support.aws.com
MX Records
  • cxm-com.mail.protection.outlook.com.
TXT Records
  • MS=ms82539711
  • TAILSCALE-XVqrtl0wY6NqZOPRlSGf
  • anthropic-domain-verification-py32jt=HFiqEJrQkA5nh0zEEib6DQzvd
  • docusign=f8b8b1eb-86c8-42a9-9532-98c0d2ebf69b
  • google-site-verification=98cIxCSaAj-gZbojnvLyBHT6wSW_G7dkjpMIKByHDU4
  • google-site-verification=t6JaRyMJ9OIyhNVb-6Q3wlA0qOC4Nxmj7J8MkLCo3FQ
  • hcp-domain-verification=878bd0a3cf88f1edd25f9de4b44b130168af4ca89b3a986a4a5903eb19611c10
  • linkedin-site-verification=58e5e8a3-f9b2-4dab-9647-69cc1f493c83
  • openai-domain-verification=dv-Gfo7IEMsOTx8agBqghvwBedK
  • slack-domain-verification=1woJLit1hrNPfhxmRz2V0y3XDFCOkoEGGlOWH3ZQ
  • v=spf1 include:spf.protection.outlook.com include:one.zoho.com -all
  • zoho-verification=zb40071595.zmverify.zoho.com
Cloud / SaaS Services Detected
Microsoft 365 Slack Zoho Campaigns DocuSign

Leak Screenshot:

Leak Screenshot