ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories
A ThreatsDay roundup covers GlassWorm VS Code themes, VulcanRAT207, a Qilin extradition, and a rogue Gentlemen affiliate.
58
Malware
BraZetsu
- Mentions · 7d0
- Mentions · 30d2
- All mentions3
- First seenSep 3, 2026
- Last mentioned22d ago
Timeline
3 articles · newest firstHunt.io Finds New Infrastructure Of BraZetsu Access Broker Months Before Disclosure
Hunt.io says BraZetsu access-broker infrastructure kept stable TLS and hosting patterns months before public IOCs.
60
BraZetsu Malware Turns Compromised Windows Hosts Into Criminal Marketplace Inventory
Group-IB details BraZetsu, a modular Python Windows malware that monetizes compromised-host access through the Infected Marketplace for initial access brokers.
45
Appears with
- Group-IBorganization · 2
- Exilwarethreat actor · 2
- Hunt.ioorganization · 2
- Visual Studio Marketplaceproduct · 1
- Group-IBvendor · 1
- Hestia Control Panelproduct · 1
- Qilinthreat actor · 1
- Ousabanmalware · 1
- WhatsAppproduct · 1
- Infected Marketplacethreat actor · 1
- Windowsproduct · 1
- BraZetsuproduct · 1
- CNABHunterproduct · 1
- Azazelthreat actor · 1
- Gentlemenmalware · 1
- Njallaorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.