Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks


Discovered 2025-11-29 15:41 UTC
Est. attack date 2025-10-21
Country GB

Description:

[AI generated] EnQuest is a leading independent oil and gas production and development company with operations concentrated in the UK North Sea. The company specializes in extending the life and extracting maximum value from maturing and underdeveloped oil and gas fields. It’s recognized for applying advanced technology and innovative techniques to enhance performance and increase value throughout its assets.

Infostealer activity detected by HudsonRock

Compromised Employees: 16

Compromised Users: 6

Third Party Employee Credentials: 5


External Attack Surface: 14


Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuse123-reg.co.uk
MX Records
  • eu-smtp-inbound-2.mimecast.com. Mimecast
  • eu-smtp-inbound-1.mimecast.com. Mimecast
TXT Records
  • aae7e4061687b02071ef97b233e33c58741b30018e95fd4bae
  • ms-domain-verification=69ef7a75-f68b-429d-a31e-8771c0e86c5f
  • 6x0psdxb6vn4zl5776kjfd0hhsmhfpp0
  • 7g33mssvb9c4m0dh0ihcevcvbr
  • etXQPjcVKjvDB+mIf2cPVr6cg+Ay/b7+lMZE1Em+MwWIJjAJ13IXTVOsEgxOnnzjz01nRnHqYMnVF6VTTT6dUg==
  • v=spf1 ip4:146.0.56.116 ip4:62.164.182.9 ip4:52.17.187.155 ip4:52.16.59.95 ip4:65.20.0.12 include:sharepointonline.com include:eu._netblocks.mimecast.com include:spf.protection.outlook.com -all
  • have-i-been-pwned-verification=b5d751bca47827823c1f7a5934e8cee5
  • gkk0h56gb30hs8r35nmp3dcdcmk92y6q
Cloud / SaaS Services Detected
Mimecast Have I Been Pwned

Leak Screenshot:

Leak Screenshot