Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Salvation Army

salvationarmy.ca

Group Bravox
Discovered 2026-05-23 21:21 UTC
Est. attack date 2026-05-23
Country CA

Description:

Provides social services, emergency aid, rehabilitation, and community support.

Infostealer activity detected by HudsonRock

Compromised Employees: 1

Compromised Users: 2

Third Party Employee Credentials: 27


External Attack Surface: 5


Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • abuseeasydns.com
  • service.desksalvationarmy.ca
MX Records
  • mxb-00747901.gslb.pphosted.com. Proofpoint
  • mxa-00747901.gslb.pphosted.com. Proofpoint
TXT Records
  • google-site-verification=0G1OOKPH4zxMqClUBHh_l-nsi7z3L_zBNCXCO5b4Phs
  • v=spf1 mx ip4:149.96.6.7 ip4:76.9.212.48 include:spf.protection.outlook.com a:b.spf.service-now.com a:c.spf.service-now.com a:d.spf.service-now.com include:spf-00747901.pphosted.com include:_spf.qp-mail.ca ~all
  • 0bnvfs34f54c8d5lf49j8779gwxtdl1m
  • _9mejbgurths1wpic49rc2wo0f79vm6l
  • MS=ms99966525
  • knowbe4-site-verification=5272970138249724d386f91c76fd0cf4
  • PF7OSPFOGY6P60JKXNDDFSY2H6SUIU2PCPUDPGOFK
  • _hhv3warn0dhhcp8p94jqnzvkj3zu9mc
  • google-site-verification=vxHb77VBYvmVzZvYygZbj3g3ORDl-A3KB-DfgYq3-2I
  • H172Ut7loX90Ujzxn+du3w==
  • smartsheet-site-validation=ROxODbhSbMXn3aHPTsZAuVVKtiHh9Q2X
  • google-gws-recovery-domain-verification=44893657
  • _vzfamidc7fug8uwyv51glfmx04spm3m
  • ca3-3c12ca698a8a4f3685cc25e0cebda701
  • matillion:salvationarmy-ca-saml
  • _9kgxqajojelc38lm5m3ufnbphte5so5
  • BFFE7F37522C96D54CE4BAAE6CE04BB2F876DE3E8C5C1AB130AEF661D3F7DB3B
  • 00DAq00000CNnyn=1TBAq000000017N
  • 00D8c000000eF73=1TBJQ0000000C2n
  • docusign=73e9899a-61af-47e4-8bdb-9c1fc269f2de
  • shopify-verification-code=Kfb6SFP8PvkwTtuAedxLMybjlQd2Jp
  • _g8f1p113said932cbh9yncw0rpenqpm
  • docusign=6cb8c028-e52c-42d3-a209-b63ea35708e3
  • facebook-domain-verification=n1qor2vz5oxzt0zlkgqd8czraiwvbd
  • _s7qu70hf1kswhowanl5av3gjj5jnphw
Cloud / SaaS Services Detected
Microsoft 365 KnowBe4 DocuSign ServiceNow Proofpoint

Leak Screenshot:

Leak Screenshot