CERT24Group-IB investigated the BraZetsu malware framework for initial access brokers — 03.10.2026Loading data…
CERT24Threat Observatory
Period

Group-IB investigated the BraZetsu malware framework for initial access brokers — 03.10.2026

Group-IB identified BraZetsu, a Python-based malware framework for Windows, and attributed it with high confidence to the Brazilian threat actor Exilware. BraZetsu supports Initial Access Broker operations by conducting extensive reconnaissance on compromised systems and collecting browser history, CNAB financial transaction files, and digital certificates. The collected access is commercialized through Infected Marketplace.

← Back to intelligence

Group-IB investigated the BraZetsu malware framework for initial access brokers — 03.10.2026

Group-IB identified BraZetsu, a Python-based malware framework for Windows, and attributed it with high confidence to the Brazilian threat actor Exilware. BraZetsu supports Initial Access Broker operations by conducting extensive reconnaissance on compromised systems and collecting browser history, CNAB financial transaction files, and digital certificates. The collected access is commercialized through Infected Marketplace.