unilever
unilever.com
Group
Warlock
Discovered
2025-06-11 11:54 UTC
Est. attack date
2025-04-15
Country
Sector
Agriculture and Food Production
Education
Energy & Utilities
Financial Services
Government & Defense
Healthcare
Hospitality
Manufacturing
Other
Professional Services
Retail & E-Commerce
Technology
Transportation
Description:
[AI generated] Unilever is a multinational corporation that sells branded consumer goods. Founded in 1929 and based in London, England and Rotterdam, Netherlands, their products range across food, beverages, cleaning agents, and personal care products. Unilever has products available in over 190 countries, and owns over 400 brands including Dove, Lipton, and Ben & Jerry's.
Infostealer activity detected by HudsonRock
Compromised Employees: 1182
Compromised Users: 2157
Third Party Employee Credentials: 1428
External Attack Surface: 187
Infostealer Distribution
DNS Records:
The following DNS records were found for the victim's domain.
WHOIS Emails
- No emails found.
MX Records
- unilever-com.mail.protection.outlook.com. Microsoft 365
TXT Records
- apple-domain-verification=E4C0v01kVqymFI1O
- asobvsp9o98o4o88deebmhdp3k
- MS=ms33698518
- tbgi8rvaqqd1ontj7a0313jbcm
- shopify-verification-code=ZYAmwcSssQBlXX5korTTO0j0Hg8ATz
- qoapauvoc4lls17s2mb0vc38gh
- 9v7a1g1satj88g8ujmb06g8a5f
- k5jgou26g14r7srjthsh967rtd
- 4tl742pvuuh7anl979dhv8eatp
- i8ekuns56m5k4arfln559a3hso
- 047C-E1BB-834E-9411-BF1C-CEA9-F775-9C90
- 24lih3u6sqnpks0ppar55n0sbs
- ms-domain-verification=6d0eafdd-1447-4e16-bde5-04b010ed7f8b
- eljrodaintkkb8o1jb7gh0qnmc
- \"6qrcm39qvha61ee9qh2esatk0p\" \"ig2peo11rgl80a3ur6ad4stosg\
- ms-domain-verification=cf50f794-1e73-4d2d-9a5c-d964ef423aa0
- google-gws-recovery-domain-verification=39436703
- MS=ms15920095
- hpe-greenlake-domain-verification=4563746b554c67486e75544c526d766465546931667564664d6a75634f347177
- \"1qs5hn95b9s7b3dj4ifobvsfh6\" \"fg7ctnsbcek23uh62rs2btb0a6\" \"i40a0k2223393l5md4dbcarhu8\" \"elcun3iq9nnqcge954llre9bkd\
- \"844vvm7mousdnlk490fmio29q4\" \"4hq6pnd5mctpq5tjt7to4rba6t\
- ILUoc6KPkFGGFc+hhfElia3CeKI2IaQKP0cd9Um6N89T8OHYimd2W8U2KfvOlapp6mhMIhl3HImOdm8AJvJbnw==
- ms-domain-verification=0a6ae95c-355f-4eed-a8af-95fe855dd2c6
- \"8thgalifv7s50jcbqt142v5stu\" \"sid43fbjg2q7sa2fidc8q35cl6\
- ms-domain-verification=244134c3-346c-4279-a1eb-c33e22e16502
- \"cptuk0b294oj6sp8oc4s65rhip\" \"o14v6gjobv4m1unlsr24kn4ad5\
- iqjrteqkimqdinrgbvtg3svh96
- 2eg0ti6efc79jc3vl7uf5bhbh7
- google-site-verification=xXOvV_3zQ5SU4Yz1jgeYJv5iuhHb9BiIS0Ijbmw9XGY
- openai-domain-verification=dv-juThis9V8oPFbi86GATrDMG0
- 5jhgjal5k0imcg6kktlda1q6lj
- vbsrg5ejgod4kn3dptj6pofe6n
- vuvsqt6fnsoo7pq59bruqjuav8
- 7ILADUMH2CDUNUNN484GFQKJBH
- 854ohn9cb5jd1tcitb1n06e167
- work-accounts-domain-verification=LaFCBt6Czw4MwEY0F6pqrYR7SJQo31
- mjmn84emire80e5cb5niojo488
- \"ic6r7b8b64sd69jpo8ph3a6l7s\" \"pqg1o81l672hk6ghuiahq9nq5o\" \"j6oajigvcevorrkf99bmt19r7\
- dtm-domain-verification=RB6feYe8l53mAEl_iNCMPcOrqW9ue-jBgv2mpGiiXVM
- e9kja9b2julidj3ot939c0mbta
- \"qepminiteoa3t7o0lhk9l3no8\" \"e9l6skpph6jrtg0kq5ti0bkjr9\
- ms-domain-verification=c3c75fe6-e49e-49f7-87c8-620956f4e64d
- \"fc4b15c56914kvhlo7nn9ujrfm\" \"4dj8qi2e30a6sn9emcc6t7dcmq\
- h6tvq5avuc2gr3tkcnkfq5hmi8
- 5o59g6hal750h4bphvgea7kqir
- 2r954kbcaorgissfffqgjjh6e5
- YISLePEt//paxxyRrkOtlwz6lYbKRQ2D6E1KYc1DncVizEwlGnvjUnTbzlbAarIq/psNBFMYwt+MTNJ+NuDOxg==
- google-site-verification=SlBm73LzwlpuU2SHaDVWpF8_wo0n4ltgCP9aCjD5yO8
- v=spf1 include:spf.protection.outlook.com ip4:13.112.93.182 ip4:188.95.0.38 ip4:188.95.7.6 ip4:89.202.116.58 ip4:43.228.187.74 ip4:174.143.100.191 a:b.spf.service-now.com a:c.spf.service-now.com a:d.spf.service-now.com include:eu.rp.oracleemaildelivery.co" "m ip4:194.60.106.150 ip4:194.60.106.152 ip4:204.110.162.26/31 -all
- google-site-verification=vH-zcRLbPlZ7i2ZEVvDB54UdLfnWFBjhQ_-MugBZi3M
- \"3rbp1m1a3cs5po512kh1ijc7ks\" \"igqlk8prn7letorqofvdev8js2\" \"b1n7hem46d028c1ir6f4208c4m\" \"2ape5lhu2mvt3ba1r9ea2nk5ld
- l3m64he5o15eatlpl1tqju4ssm
- docusign=f98056cd-69f2-4bc1-88c4-630cb23ebe6d
- google-site-verification=qdy9-6tcIDBZpQayPQysMK7WDw1TmOgC9F7O6HMpc60
- ms-domain-verification=186ba131-950e-44ca-a1ac-c08f1f0df023
- facebook-domain-verification=cnf7haw2wg65730yi6cmv59ual9a03
- adobe-idp-site-verification=61b18e64-85df-4b0a-86c6-9e869e7774fc
- docusign=dff26325-dfdd-4627-ba07-3ce889fc1846
- google-site-verification=pE0yecYULaY-kz5NO8x5CHl010pRnGhN06tTj4HL0rY
- google-site-verification=-9b2Hk0rCKAY2r9S4Mb_las0QolE0aNkgkfyd3CyhV8
- 2A20-1783-C291-C960-C5E4-A85D-DC27-34E4
- ms-domain-verification=e9626f45-fa83-46e7-b711-66d5fb7ce145
- b43f5826e58b0865b4d031884f3522db4785a9bd2b103d8eacb3680e75aa4251
- ajn41g56vpcmkn4d4lks17srps
- ms-domain-verification=2087dc0f-ee4f-4a86-a6ac-fad1c5a82234
- atlassian-domain-verification=N7aEXstdd4Fp22vUAMya76NDGJvt9V7dg94VqYiM6VDdyMfX4KNhUaqvSbaG1G0L
- amazonses:uKRpIwwKmbQJ1VjorugME0v7EdXJtdxEBvgzTEkoOlI=
- 16A948585C15AA6E36864946C53F2A3591A2F8AEFCA930D9AB6371B16E604176
- ms-domain-verification=5902461d-0c27-4e4a-ab04-517bc8a1f2db
- scm6pf543nvmer0ahagg2u2kn8
- onetrust-domain-verification=d172d5606b9340f690828f6f800567cc
- b7dog8plmhc8j95ngc2fro52d1
- ktphvabv95bobf3h33fqbea0cs
- flexera-domain-verification-djjkiksvkbudbxwa
- \"487k40r678nk35ooiq3cmak1fp\"\"hiovk0crivhmos1503lhbmce8d\" \"4eqh10agor255gnod6fje8ihfs\" \"qq45tp811ntvs43390cck3tab2\" \"isk6vsipmg9plb9dtpjoul1g7b\" \"no3042tuaq3ghjsvg71himkjfp\
- q3oleitadm6dk17h7jataom8o2
Cloud / SaaS Services Detected
Adobe
Amazon SES/WorkMail
Apple
Atlassian
DocuSign
Flexera
Microsoft 365
OneTrust
OpenIA
ServiceNow
Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data. This platform indexes only publicly visible information posted by ransomware operators and open web sources without accessing or obtaining the underlying stolen content. The service is provided to support public awareness, legitimate research, and cyber-resilience. No stolen personal or confidential data is collected or distributed via this site.