Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

defi SOLUTIONS.

defisolutions.com

Discovered 2024-04-23 16:14 UTC
Est. attack date 2024-04-23
Country US

Description:

defi SOLUTIONS is a company that develops SaaS based loan origination software solutions. It also provides a platform that enables transferring and receiving loan documents and a web-based auto loan portfolio marketplace. The company serves consumer finance companies, banks, credit unions, etc.

Infostealer activity detected by HudsonRock

Compromised Employees: 1

Compromised Users: 31

Third Party Employee Credentials: 1


External Attack Surface: 14


Infostealer Distribution

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • trustandsafetysupport.aws.com
  • 4dd04b54620e27e5d41c727277831e9dc652547bc28bb96df65264e2705a6ef6defisolutions.com.whoisproxy.org
  • 4dd04b54620e27e5d41c727277831e9dd0b1132ea5562cbebe29d471add4deb8defisolutions.com.whoisproxy.org
  • 4dd04b54620e27e5d41c727277831e9df8fc10b8dcb36c9e75428804f5037b66defisolutions.com.whoisproxy.org
  • 4dd04b54620e27e5d41c727277831e9de7fee83a973104b0c78613b192c1e587defisolutions.com.whoisproxy.org
MX Records
  • us-smtp-inbound-2.mimecast.com. Mimecast
  • us-smtp-inbound-1.mimecast.com. Mimecast
TXT Records
  • google-site-verification=6ng6AjFd02kunbndduEfp5chQ2rohsxO6IyjAyouOZ4
  • pardot511281=47f25d458fcbb4a22b7056911d65ad94a4565262f89018ddcf48c7962b1d1ce2
  • specops-verification-code=52917e0a-3577-4467-9abc-50ae4698a8df
  • status-page-domain-verification=bzd7wwnz6q9p
  • v=spf1 redirect=9v58hqvi._spf._d.mim.ec
  • zoho-verification=zb29563391.zmverify.zoho.com
  • MS=ms34525851
  • MS=ms46620900
  • MS=ms54113006
  • anthropic-domain-verification-a2a14h=1k3okbFHdTnJ7at4TzDBED6ce
  • apple-domain-verification=tdpCK21FRGYoNZ93
  • atlassian-domain-verification=EG8BbEIjV6tVj/79sRUFfcyHUyqx3LqBo6Wz+aIWGffIGHXq7337Ax/3/Iyv3EUQ
  • ca3-916bd35c939346f2b3e554994ff33fad
Cloud / SaaS Services Detected
Apple Atlassian Microsoft 365 Salesforce Anthropic Zoho Campaigns Mimecast

Leak Screenshot:

Leak Screenshot