Contact us Buy Me a Coffee

Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Logo

Qatar Biomedical Research Institute (QBRI)

www.hbku.edu.qa/en/qbri
Group Crypto24
Discovered 2026-04-17 14:40 UTC
Est. attack date 2026-04-17
Country QA

Description:

[AI generated] Qatar Biomedical Research Institute (QBRI) is a research institute based in Qatar, operating under Hamad Bin Khalifa University. It focuses on biomedical research in areas such as genomics, diabetes, cancer, and neurological disorders. QBRI aims to advance precision medicine and translational research to address health challenges prevalent in Qatar and the broader region, contributing to the country's science and innovation goals.
Infostealer activity detected by HudsonRock

Compromised Employees: 25

Compromised Users: 5806

Third Party Employee Credentials: 85

External Attack Surface: 111

Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • hbku-edu-qa.mail.protection.outlook.com. Microsoft 365
TXT Records
  • Dynatrace-site-verification=66b56426-2985-4c72-9f49-046d200f9933__rgkh26ac9ght2bsq6frqlq749v
  • adobe-idp-site-verification=346bb9f621acbb492bc829c8864614a0700c4d7762fdebe30e056f94d5c76e40
  • beaplttve81btaa6dvpvmev3i4
  • v=spf1 ip4:86.36.20.27 include:spf.protection.outlook.com include:spf-westeu.emailsignatures365.com include:bmsend.com include:_spf.qualtrics.com -all
  • pe8j4ppe6378ac8ijfbacuuh4m
  • docusign=1eff46c1-bf0a-454f-8e1e-0ab08e77d364
  • qI7r0ci6LugFVJ7FVoTu31wQO3PznS9lalK0r1xLZ/Erc3/en2Qf9QwNTAjczwtRLjAdba90VJtrwnsa03aYTA==
  • dr145klj5996crguqn6s63csem
  • Q0A1T28600 v=spf1 include:hbku.edu.qa -all
  • docusign=46785ffe-8cad-40fd-9507-8bcb10116ce8
  • docusign=8468254d-d2d7-4d2d-b428-e6f46018e201
  • docusign=771c44c3-a95c-4758-aee7-8db6e004ef1f
  • google-site-verification=TzLFVIo_fixdbfMpLHyLljgs6HDLQ_k5YrzKqT7r-60
  • 4ovnlbuk6dq29vdtgsq71i1stt
  • ciscocidomainverification=761b28ba244ceffedb65f88b44edd56229539bc60fff7ce271f5a77688b72201
  • qvgd9ska9dl84plll9ircqkpdo
  • google-site-verification=CYfawi-R-v9DPXsf7Sv2cAzEPli2GeNZ003NvTsXoio
  • google-site-verification=YeGvLKUDsL2m0srdmrrChGflihItL62K4ESInzdn694
  • slia9p7h5h0kkki5bd0aje8cvm
  • MS=AC5D6960953421495A2DE2F03AFCB4B701E428B8 TTL: 3600
  • apple-domain-verification=3sUTfw22YeVPDa4n
  • MS=ms95764401
  • q71r2uqao8562op9r3qlf2mqf7
  • ahrefs-site-verification_45460c44532f7e4f51cb87e5852640c60c04c159e0f654cc24655295484d8e91
  • 61vm5i1tmpddfd0sg8k67m5rfp
  • google-site-verification=qsvqIO2byUWNWQL9tr0aw7BRsMJpKU4ri0G9w48aJn8
  • 142mcktln9rrg68j6cqmt1hd4
  • 9daagdikivgeg30t2qbaihluri
Cloud / SaaS Services Detected
Adobe Apple Microsoft 365 DocuSign

Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data. This platform indexes only publicly visible information posted by ransomware operators and open web sources without accessing or obtaining the underlying stolen content. The service is provided to support public awareness, legitimate research, and cyber-resilience. No stolen personal or confidential data is collected or distributed via this site.