Last seven days
- First activity
- Sep 1, 2026
- Last activity
- Sep 1, 2026
- Feed role
- C2
- Host form
- 0 IP / 3 hostnames
C2 tracking
Seven-day C2 activity
Derp observations, rolling seven-day window
3 Sep 1
Observed infrastructure
Leading locations
- US2
- BR1
Leading providers
- Cloudflare, Inc.2
- Oracle Corporation1
Infrastructure traits
- Hosting 3
- Anycast 2
Reported operators
Threat actors
1 named in public reportingBraZetsu is a Python-based Windows malware framework used by Exilware to profile compromised organizations, identify valuable systems and data, and replenish access listings on the Infect Marketplace.
MITRE ATT&CK
BraZetsu in ATT&CK
16 distinct techniquesTechniques
16 techniques T1113 Screen Capture T1204.002 Malicious File T1083 File and Directory Discovery T1082 System Information Discovery T1057 Process Discovery T1217 Browser Information Discovery T1059 Command and Scripting Interpreter T1102.001 Dead Drop Resolver T1071.001 Web Protocols T1005 Data from Local System T1046 Network Service Discovery T1518 Software Discovery T1564.003 Hidden Window T1566 Phishing T1573 Encrypted Channel T1036 Masquerading
