infect[.]onlineDomain
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 22 days ago
What the reports say
2 reports, newest first · the exact sentence from each-
Anatomía de BraZetsu: Cómo los cibercriminales abastecen el ecosistema clandestino“… desde febrero de 2026, el cibercriminal brasileño conocido como “Exilware” ha operado una plataforma comercial a través del dominio infect[.]online, donde vende sistemas comprometidos como activos comercializables.”
-
Anatomy of BraZetsu: How Cybercriminals Fuel the Underground Ecosystem“Active since February 2026, the Brazilian cybercriminal known as “Exilware” has operated a commercial platform through the infect[.]online domain, where it sells compromised systems as tradable assets.”
Indicators reported together
named in the same reports- caixaentradas1inboxshop[.]sitein 2 reports
- caixaentradas1boxshop[.]sitein 2 reports
- c2.installscenter[.]comin 2 reports
- 38.242.246[.]176in 2 reports
- installscenter[.]comin 2 reports
- hxxps://pastebin[.]com/raw/aF0WCxiain 2 reports
- hxxps://pastebin[.]com/raw/hM0nXNBPin 2 reports
- hxxps://pastebin[.]com/raw/9ChwVzzwin 2 reports
- infectonline[.]storein 2 reports
- f775fe06a4c2563c…cee7972e6b17in 2 reports
- 54e313434a7f3fa3…cdd9fabf2700in 2 reports
- 91f225dcc7a01f92…02ce638fa6b0in 2 reports
- cd8fc8effea20d28…41d51b6f6c78in 2 reports
- d881a60ccd03b541…65843643af99in 2 reports
- 0fa785bb9f95b113…2d85746fc5bfin 2 reports
- 1510823e7c80b4db…2e1c5cf30246in 2 reports
- 96960409b6e1abf2…d5aa56579042in 2 reports
- 0cd0cc49ea4ff48c…7f70bb6c0d5din 2 reports
- 30af2ec2437af0f4…a7a781c1e2fein 2 reports
- 10de6185e31539cf…7ef8c04de39cin 2 reports
Copy these 20 indicators · defanged
Thanks — we review every report.