Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Discovered 2023-04-28 08:39 UTC
Est. attack date 2023-04-28
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Description:

Anton Paar develops, produces and distributes highly accurate laboratory instruments and process measuring systems, and provides custom-tailored automation and robotic solutions. It is the world leader in the measurement of density, concentration and CO2 and in the field of rheometry. Anton Paar GmbH is owned by the charitable Santner Foundation.Progress and innovation, high-precision craft and the passion for research – these define Anton Paar. Our measuring instruments reflect our thoughts and actions: Components produced with the highest precision, innovative measuring principles and well-designed user interfaces represent our understanding of quality. Our products are created in a dialog with our customers and integrate seamlessly into their working environment. They exactly meet customers’ requirements and are the solutions for the challenges they face. The notion of continually pushing back the limits of what is technically feasible inspires and motivates us each day to produce the best measuring instruments for our customers. As the world leader in the fields of density and concentration measurement, rheometry, material characterization and the determination of dissolved CO2 we are already well on our way to achieving this.SITE: https://www.anton-paar.com Address Anton Paar d.o.o…Tbilisijska 57 b 1000Ljubljana SLOVENIATel. +386 [REDACTED] 4234005Fax +386 (1) [REDACTED]@anton-paar.com

Infostealer activity detected by HudsonRock

Compromised Employees: 122

Compromised Users: 61

Third Party Employee Credentials: 9


External Attack Surface: 118


DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • mx1.hc585-55.eu.iphmx.com. Cisco/IronPort
  • mx2.hc585-55.eu.iphmx.com. Cisco/IronPort
TXT Records
  • docker-verification=096db956-3442-4d95-a2e3-076eabb93214
  • v=spf1 mx include:spf.crsend.com include:spf.protection.outlook.com include:sendgrid.com include:_spf.psm.knowbe4.com include:spf-de.emailsignatures365.com ip4:193.46.209.250 -all
  • cisco-ci-domain-verification=18644e62032682ff8fc810734088a4009352822d3cb9c1074e9d8a899785459d
  • docusign=a551ca92-7170-4ba0-94d3-2ca70eb18b1f
  • pardot1125381=9f3bc9e5dfd76423b1407a8e076877397abda9bb8c6f0de94fd2099d137bf07a
  • miro-verification=d559105327e9fa315aa5b3d3fdab6ca695a60d01
  • pardot1170591=4ddf6b9585630a6df76ad8531ec0f7a3dae68d12a6bf4e52e51354ca7bc33e7b
  • apple-domain-verification=fCO6xX5aezAXskUm
  • _globalsign-domain-verification=JQgY4vHEBL24l_pRbEdscDSHtGQXd2Y8LhIYtNk26g
  • MS=ms41877565
  • faAG9pYsrDT4RldZWg/fuRI4mpE+KOuZx7PzwNz/VqKkbfPdLCxCeCZGzVgLRJVO3BcUE4PyEWiN4BpIZLB9Uw==
  • google-site-verification=zsaA40PIPLYHgfNQwSOFWRSnKZk_I4UB4qKsbxui_oM
  • openai-domain-verification=dv-O1KYYNhToHYyOF27HUj5PmBS
  • atlassian-domain-verification=JJNoaWQuTFcNFLlADy4f3j/XWtyfII12SD8CDHYWUUQw2IIwDaBxxftmq/pHtN8A
  • docusign=5fc1aeff-6dcd-4483-b1ab-9f0f268f009f
  • successfactors-site-verification=ZGMxMDAzMWFmODU1NDdjMzBiOWYwZDM1Mjk4ZTM3NzQwY2ZlZWU5NjcxMTcyYWY0YjE3Y2NkYTU5OGMzNGEwNQ==
  • MS=ms18942387
  • have-i-been-pwned-verification=dweb_43u2pp923yw4ja9y47h6ibog
Cloud / SaaS Services Detected
Apple Atlassian Cisco Docker DocuSign Global Sign Have I Been Pwned KnowBe4 Microsoft 365 Miro OpenIA Salesforce SAP Success Factor

Leak Screenshot:

Leak Screenshot