PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Brazilian Access Broker Targeting Latin America: Mapping BraZetsu Infrastructure Beyond the Published IOCs

hunt.io | blog | #threat-intel | #latin-america | #initial-access | #braze | #huntio
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

TLS certificates tied BraZetsu's C2 hostname to a second VPS on Njalla, live months before disclosure. HuntSQL queries, timeline, IOCs and detection.
Published
Collected

Related coverage

tool · hunt.io
Inside a PaperCut Attacker’s AI Toolkit: Agent Instructions, Exploit Code, a Second RCE, and Victims Across 45+ Countries
A PaperCut attacker left their open directories exposed. We reconstruct the AI-driven exploitation pipeline, a second XML-RPC RCE path, and chisel persistence from the operator's own server.
blog · bishopfox.com
The Foxes of Mexico: A Security Roundtable
Members of Bishop Fox's Mexico team share their paths into cybersecurity, life at the new Guadalajara office, and advice for those considering security careers in Mexico.
blog · hackerone.com
Hacker Spotlight: Interview with edduu
Argentine hacker @edduu went from teen ROM-hacking curiosity to SQL injection and bug bounties. He shares his methodology for maximizing bounties and writing robust reports from Latin America.
blog · wiz.io
Beyond CVEs: The Exploitation of Everyday Misconfigurations
From a DistrictCon talk, Wiz shows how everyday misconfigurations in Selenium Grid, Spring Boot and PostgreSQL became full compromise — no CVE needed, just default credentials and exposed services.
blog · wiz.io
Making Sense of Kubernetes Initial Access Vectors Part 2 - Data Plane
Part two of Wiz's Kubernetes initial access series covers data plane vectors: application RCE, service account privilege abuse, container image risks and escapes, and execution-as-a-service workloads.
blog · wiz.io
Making Sense of Kubernetes Initial Access Vectors Part 1 – Control Plane
First of a two-part series: Wiz introduces a taxonomy of Kubernetes initial access vectors spanning control plane, data plane, cloud, and CI/CD, then drills into control plane access and detection.
Back