Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks


Discovered 2026-05-01 17:09 UTC
Est. attack date 2026-05-01
Country US

Description:

[AI generated] LexisNexis is a global information and analytics company headquartered in the United States. It operates in the legal, regulatory, and business intelligence industries, providing research tools, data analytics, and risk management solutions. Its platforms are widely used by legal professionals, law enforcement, and enterprises to access vast databases of legal documents, news, public records, and compliance information.

Infostealer activity detected by HudsonRock

Compromised Employees: 49

Compromised Users: 3668

Third Party Employee Credentials: 31


External Attack Surface: 123


Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abusecomplaintsmarkmonitor.com
  • whoisrequestmarkmonitor.com
MX Records
  • lexisnexis-com.mail.protection.outlook.com. Microsoft 365
TXT Records
  • pardot1020222=2ac5e6b5488fa603b8d462ab32278b251ca2607fab6fe29155ef599e0e6ed7d1
  • facebook-domain-verification=" "g6cmq4oko64h1gjhy7dkniag7ku5kb
  • pardot1020222=e7958620038f304fedff0327e58b7ce8f3fabbee6ba642f8d39ca1c60af86187
  • pendo-domain-verification=NyDyUaV2ESqQWAgvRjhIsnDkFeM
  • pardot200072=8bbbddef393795c0b367eaa8556582b8483ae4a4fc56c090c00b03721934a069
  • webexdomainverification.=9094f915-21e5-4e23-96f0-7cd5b236311d
  • webexdomainverification.=10016647-2f54-4099-b985-db46b7f811bc
  • cisco-ci-domain-verification=2d7c39a7c233dcaf1174882db640ffa59e579e5375d2d00a38e0d0f4ecdb3e67
  • pardot1020222=aa23dbd3c0ee77708b9ae8a89d4517df7b9f1e6fee42bf7177b78f13e02c52cd
  • airtable-verification=9d74c70182c1a62c56bfd3d55575a39e
  • pardot899741=5bea8ec8215073c65f9365fef8b5aed7b97eb32215d3bba8155758c7b5554846
  • onetrust-domain-verification=843d879653584ea7b545ef842cd13b11
  • MS=ms99617937
  • fastly-domain-delegation-dd439187-11102021
  • zapier-domain-verification-challenge=04b7fdf3-37d3-4340-8136-491dbf7ea242
  • webexdomainverification.=98455431-ecca-47f7-b74c-db6f39e5df0c
  • apple-domain-verification=kq0qmtQYbGFhbCNe
  • pardot1020222=43739bc9a9522d742aa6e31ac4646061774f58f19740ffc6e4a6f38261a8ed4c
  • google-gws-recovery-domain-verification=64642360
  • adobe-idp-site-verification=fd4fae74b683e6e22ef9b491871ae9f0faf7856b8a8588d267e24565628d2dbd
  • pardot899741=7fad9f59001d1b63f99cb7c30d03cf4e993362b26290e1e703844b83fd324a03
  • pardot1020222=f6855c0731bacfc5774557f856213f2b93ef23c085d8ffd9c681960e5028219b
  • pardot682313=a55158ece703897aaa0a119379e16003cdfa45ad3c87d2cb1f1b2dd3a3e4f017
  • pardot1079963=5850afdb4436e3ad368e33be5e8834a6663091964b43d12b69178d13487f37b2
  • sending_domain1028433=55066e08e19adcc207f5f3027c3804bb0a2d7f9f1dd68e81cf8d7fd5ae581a1b
  • google-site-verification=JUSVSgKctH4TF38tZyDPNmZ8QxJ0zmUgov2sriW3a0I
  • _ene816jlthyl0j6udwog3148m255lp2
  • pardot899741=4d6a245a8421164ff6507db4fd629bc9060ee465dd2f10952fdb30a91e0380fc
  • smartsheet-site-validation=socDQWpHCnktSj6-goC2CPywT68XkmU6
  • slack-domain-verification=6Fs5lrs127t66165SRX4kKaQlKpbQry9cVsZpSbp
  • pardot899741=7813ebaeb3c147a17b7e00d5a8af4b6a480ba23567bb6fa37fd055e556494a03
  • google-site-verification=rcdQIw9Aqm7sYGK3OX5TRkiJiJ5ZRtc-rqyDpow65uY
  • pardot899751=ac79bfb84cd1fdf91244ff3b8b24b5bd04e57ac936f730451348d8432d78686c
  • anthropic-domain-verification-jh44hw=jzyG4ohMTmk7jUNz5SdtMdWyH
  • webexdomainverification.=0b066749-67a2-41d5-b483-5bc225de67e1
  • pardot682313=c2a8d9dbaa032dca9785a38893ee3e0563f2227e1214fa94e155928cbe00b2ac
  • pardot_200072_*=bd0fbecef50fc865c4efdb681fd569834d66927be682bfc5e8b11125ff462a53
  • canva-site-verification=OLO5hngordp0CTr-RvwC5A
  • pardot_322251_*=afc209af3ea666b0b8da5d0527d49c4e74dc2b37e4800df77b096360b4396e47
  • onetrust-domain-verification=1d24ebf1576b4466add8b2f781d3d902
  • miro-verification=39a0a4ee76533d3eb6ef3701caa0a7817f8d3390
  • VvfeQSRIsxT4RrK4Z8xwBoF4dny2TAKc3uBogPZh911sXexDIEF3iK4zy4mVzexj9pQTvmkqzvlvGxMJ6+FIAQ==
  • figma-domain-verification=7e9fc71b9c170bbc3d49380395182fb0a28e13607a352e108abb89226af15693-1770995647
  • AXw1tdfIuU9b7b6NhpHgxVt4wvmtCYcuWENPieRrGx0=
  • zapier-domain-verification-challenge=f8dae159-fc12-442e-87f6-be02edac0f63
  • ZOOM_verify_uE8UJePvRJuQ1Pc8Z0tVj0
  • _ucaj3hzrowyadogalc9an52dnqorzyb
  • sending_domain1020222=1bc5e9bddf90f68f8cb3492c962733d87d72066ec6e9a0b3e4e59ecccbb1778f
  • pardot1028433=19772e49dc233e068d316ff928c45f12f0d2285a064ba1b29dd7b0963090ab7b
  • v=spf1 exists:%{i}._i.%{d}._d.espf.agari.com include:%{d}.33.spf-protect.agari.com -all
Cloud / SaaS Services Detected
Adobe Apple Microsoft 365 Salesforce Slack Anthropic Miro Cisco OneTrust Cisco Webex Zoom

Leak Screenshot:

Leak Screenshot