Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
41 IOCs
BraZetsu: AI-Enhanced Reconnaissance Fuels Exilware’s Access Marketplace
Threat Actors
Malware Families
Excerpt
BraZetsu: AI-Enhanced Reconnaissance Fuels Exilware’s Access Marketplace Blog Home Company Marketplace The PolySwarm Blog Analyze suspicious files and URLs, at scale, millions of times per day. Get real-time threat intel from a crowdsourced network of security experts and antivirus companies competing to protect you. BraZetsu: AI-Enhanced Reconnaissance Fuels Exilware’s Access Marketplace Sep 11, 2026, 1:23:19 PM / by The Hivemind Tweet Verticals Targeted: Finance,…
Read the original report →Diamond Model
Adversary(34)
Infrastructure
Capability(41)
Victim
Indicators of Compromise
Open the mindmap →41 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2023-1389 | High | Score 82/100 | First seen |
| CVE | CVE-2025-49704 | High | Score 82/100 | First seen |
| SHA256 | f775fe06a4c2563cb03e1aa42eb4e9532840cce9dc168ea2ca97cee7972e6b17 | Medium | Score 53/100 | First seen |
| CVE | CVE-2022-30190 | High | Score 79/100 | First seen |
| CVE | CVE-2025-0994 | High | Score 82/100 | First seen |
| SHA256 | 0cd0cc49ea4ff48c675368f725e183608494f22fefa92d2f33577f70bb6c0d5d | Medium | Score 53/100 | First seen |
| SHA256 | 0fa785bb9f95b113539bb909da88e6cac9a433a07935571d9bcd2d85746fc5bf | Medium | Score 53/100 | First seen |
| SHA256 | 91f225dcc7a01f926b03e8540d8b5e2d6c8e3763cc30f57381d702ce638fa6b0 | Medium | Score 53/100 | First seen |
| CVE | CVE-2022-47986 | High | Score 82/100 | First seen |
| CVE | CVE-2025-55182 | High | Score 82/100 | First seen |
| SHA256 | c4dd46e5b450349fd9fbf686a5a22f55f8371123b098104db663a3980646e138 | Medium | Score 53/100 | First seen |
| CVE | CVE-2021-3493 | High | Score 82/100 | First seen |
| SHA256 | 1510823e7c80b4db5333dd18cd5992881496da30032d6d69b2a82e1c5cf30246 | Medium | Score 53/100 | First seen |
| SHA256 | 3f2f48525cf082672e38808480e214775e03dd943ff2df86172665aad96a5eaa | Medium | Score 53/100 | First seen |
| CVE | CVE-2023-34362 | High | Score 79/100 | First seen |
| CVE | CVE-2025-3248 | High | Score 79/100 | First seen |
| SHA256 | 10de6185e31539cf01c8b05d9559e65e8693efd695f315de54667ef8c04de39c | Medium | Score 53/100 | First seen |
| CVE | CVE-2025-53770 | High | Score 79/100 | First seen |
| CVE | CVE-2022-31199 | High | Score 82/100 | First seen |
| CVE | CVE-2021-21974 | High | Score 82/100 | First seen |
| SHA256 | 54e313434a7f3fa349e439857e23ab536a95c9927cf62f8358b5cdd9fabf2700 | Medium | Score 53/100 | First seen |
| CVE | CVE-2022-21894 | High | Score 82/100 | First seen |
| SHA256 | d881a60ccd03b5417a1eed184143a18a333e7e9e9e351596a7a765843643af99 | Medium | Score 53/100 | First seen |
| CVE | CVE-2025-49706 | High | Score 82/100 | First seen |
| CVE | CVE-2023-46604 | High | Score 84/100 | First seen |
| CVE | CVE-2021-4034 | High | Score 79/100 | First seen |
| CVE | CVE-2022-26134 | High | Score 82/100 | First seen |
| CVE | CVE-2023-2868 | High | Score 79/100 | First seen |
| SHA256 | 67fcfbdaab397ad1273135a3c6aa1d220ab76491cf945df081503401cc9732d2 | Medium | Score 53/100 | First seen |
| CVE | CVE-2024-3400 | High | Score 79/100 | First seen |
| CVE | CVE-2023-22518 | High | Score 82/100 | First seen |
| CVE | CVE-2024-21412 | High | Score 82/100 | First seen |
| SHA256 | bc91f90a5677404cf9c8f4bed7b36c22027b1549ffefee129b41fab3db3108b8 | Medium | Score 53/100 | First seen |
| CVE | CVE-2021-33044 | High | Score 79/100 | First seen |
| CVE | CVE-2026-21509 | High | Score 79/100 | First seen |
| CVE | CVE-2017-7921 | High | Score 79/100 | First seen |
| CVE | CVE-2024-7344 | High | Score 82/100 | First seen |
| CVE | CVE-2023-36025 | High | Score 82/100 | First seen |
| CVE | CVE-2025-53771 | High | Score 82/100 | First seen |
| CVE | CVE-2024-40766 | High | Score 80/100 | First seen |
| CVE | CVE-2025-21042 | High | Score 82/100 | First seen |
IOC Relationship Graph
Building graph…