Skip to main content
Meridian Energy
Request a Demo

Finding CF-3036

High exposure on mail.meridianenergy.example

Mark in progressFalse positive
Back to findings
HighNew
EmployeeDetected 2026-07-13 18:03Seen 1× across sources

Credential evidence

Passwords are masked — full values require reveal permission
Identity
[email protected]
Login URL
https://mail.meridianenergy.example/owa
Password
Hp5•••••••
Matched asset
mail.meridianenergy.example
First seen in log
2026-07-12

Infected device

Device
WIN-D2K4P7X
Operating system
Windows 10 Pro 22H2
IP at capture
198.51.100.34
Country
Brazil
Infected at
2026-07-12 10:26
Antivirus
Not detected in log

Source block

Block
BLK-88062
Stealer family
StealC
Posted
2026-07-12 04:41
Channel
Telegram cloud-of-logs
Lines in block
946

Related findings

Triage timeline

  1. 2026-07-13 18:03 · System

    Finding created from stealer block and matched to asset mail.meridianenergy.example

  2. 2026-07-13 18:03 · System

    Severity set to High based on asset criticality and credential context

  3. Awaiting next analyst action