Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks


Group Lapsus$
Discovered 2026-05-29 22:52 UTC
Est. attack date 2026-05-28
Country DE

Description:

Full Infrastructure, Source Code, GitHub Tree & Internal Network Maps

Infostealer activity detected by HudsonRock

Compromised Employees: 2396

Compromised Users: 35457

Third Party Employee Credentials: 4576


External Attack Surface: 200


Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • vodafone.com-Adminanonymised.email
  • vodafone.com-Registrantanonymised.email
  • vodafone.com-Techanonymised.email
  • abusecomlaude.com
MX Records
  • vodafone-com.mail.protection.outlook.com. Microsoft 365
TXT Records
  • atlassian-domain-verification=1iMh3GW/iMZr6dD77hV7pNGaA2fgvStOY6a7oZIaQtVSyvJE5x0VOIPeo8QWaFNi
  • atlassian-domain-verification=WjOdDOYWbIxSUG7aczkAFLmaoSPDbsUlNKHYo7Dmd6YeuEedce7tziarQWkUJEva
  • IF0KPDLIlMEPZ0mqzzxAaZBjMn65DhH6EaSsmAC26iaDY2x+ErGTfT6gWM/VuDCR+Z8RtcXgRYGZcC27hkJhdg==
  • mongodb-site-verification=erY0KgLO8zJGLFb6GMvp3s8cimwGYK15
  • infoblox-domain-mastery=31c584d39074de6c6658acc7f60b911b5d313b8ea4b72cf2077313bcf6bfed9e51
  • google-site-verification=_wQrL3Z484Ng3_bGbZT6hO04YHtDBrOn7ZLSfFUerWA
  • adobe-idp-site-verification=cdbe270d0c6e9b18450be7223cba36773ef85232a35f440383977eb7a4bc9fb5
  • atlassian-domain-verification=El54eXUUPjedJ8nCF042euUWapwSQRqHKbZjyT31uRGPG3XKBwJ6Ma2O5M7FE9xE
  • ms-domain-verification=92d6fd06-4ebc-477d-b2d7-1af5036fb70d
  • atlassian-domain-verification=aAPyPGhRUYsoUmX8SEl59GcBYVWRDYwprruM0faorQsgItf2SegQnLOeit8h4DAQ
  • jamf-site-verification=T5lRbr2jKY4To4bVllonIw
  • successfactors-site-verification=ZTYwMzY0OGU1YTE0Y2NlZDY5YThmN2ZhM2I3MTQyYzRiODdhMGM2YWViYTAzZDA5YTk4OWQ5MDYwMzI0Nzc2Mg==
  • globalsign-domain-verification=krP11YYMRJfhrMXijpvgf-E6PTx2PecX95_r_8TPQX
  • globalsign-domain-verification=de8b9745ab4462b435c636166a78c9c2
  • successfactors-site-verification=ZDkwY2QzZmFjMjQ0YTY5YjkyZjYyNjA4NGEzMDkwNWI0MTc5NDg4ZjQ1ZWZiYzM4M2ZlNDVjOTJjMjVjZTNiOQ==
  • google-site-verification=2yO3VpGKz9z_PYOBRhnjeSrVI_XHmyUJ_VAEka4X58E
  • globalsign-domain-verification=aa97648e6791b52699a0ffd830432766
  • atlassian-domain-verification=cKtqT2SnK5t9pQVAJpqI7jUakfdo9KCHPeCH7gTVppgcnV8uF9Z0JVPL/zfuPQvP
  • v=spf1 ip4:195.232.248.108/30 include:spf2.vodafone.com ip4:65.254.253.0/24 ip4:195.232.248.240/28 ip4:195.232.245.160/28 include:spf1.vodafone.com ~all
Cloud / SaaS Services Detected
Adobe Atlassian JamF