ctrlINT What the industry said about every indicator, with the quote

installscenter[.]comDomain

Reported by 2 independent sources · first reported by Group-IB · last reported

Last reported 16 days ago

What the reports say

3 reports, newest first · the exact sentence from each
  1. “The new host came alive on March 21, the very day the installscenter[.]com domain was registered, running the identical Hestia Control Panel setup with the same painel prefix.”

    Security AffairsNews
    Hunt.io Finds New Infrastructure Of BraZetsu Access Broker Months Before Disclosure
  2. “Coincidencia de infraestructura C2: La infraestructura de Comando y Control (C2) de BraZetsu, installscenter[.]com, se conecta directamente con un panel de acceso para clientes que Group-IB atribuye, con un alto nivel de confianza, a “Infect Marketplace”, operado por Exilware.”

    Group-IBVendorC2
    Anatomía de BraZetsu: Cómo los cibercriminales abastecen el ecosistema clandestino
  3. “C2 Infrastructure Overlap: BraZetsu’s Command and Control infrastructure installscenter[.]com directly connects to a customer login panel that Group-IB attributes with high confidence to the “Infect Marketplace” operated by Exilware.”

    Group-IBVendorC2
    Anatomy of BraZetsu: How Cybercriminals Fuel the Underground Ecosystem

Indicators reported together

named in the same reports
Copy these 20 indicators · defanged

Thanks — we review every report.

Report a wrong value
What is wrong with installscenter[.]com here?
No account needed. We do not store your IP address.