Tag: proton66

3 Attack Reports | 0 Vulnerabilities

Attack reports

Part 2: Compromised WordPress Pages and Malware Campaigns

This analysis focuses on malware campaigns linked to Proton66, particularly those targeting Android devices through compromised WordPress websites. The threat actors used redirector scripts to target users from various countries, mimicking the Google Play Store. Additionally, the XWorm campaign tar…
xworm
phishing
ransomware
android
remcos
wordpress
credential theft
strela stealer
proton66
weaxor
2025-05-16
Published: May 16, 2025
Downloadable IOCs: 45

Where to Find Aspiring Hackers

This analysis focuses on Proton66, a bulletproof hosting network enabling cybercrime operations and serving as a hub for aspiring cybercriminals. It examines the activities of a threat actor known as 'Coquettte,' who is linked to the Horrid hacking group. The investigation reveals a fake cybersecur…
amadey
lumma stealer
cybercrime
vidar
infostealers
penguish
rugmi
2025-04-04
rescoms
proton66
bulletproof hosting
recordbreaker
horrid hacking group
amateur hackers
fake cybersecurity
rugmi malware
Published: April 4, 2025
Downloadable IOCs: 0

Amateur Hacker Leverages Bulletproof Hosting Server to Spread Malware

A novice cybercriminal, known as 'Coquettte', has been discovered using a Russian bulletproof hosting provider, Proton66, to distribute malware. The hacker's activities include deploying the Rugmi malware loader through a fake cybersecurity product website and selling guides for illegal substances …
amadey
lumma stealer
vidar
rugmi
2025-04-03
rescoms
amateur hacker
proton66
cybercrime incubator
bulletproof hosting
fake antivirus
raccoon stealer v2
illegal guides
horrid collective
Published: April 3, 2025
Downloadable IOCs: 6
Click here to see more Attack Reports