Other threat group

Exilware

Exilware is classified as other threat group.

Type: Other threat group
Origin: Brazil

Exilware is a Brazilian threat actor operating the "Infect Marketplace," which commercializes access to compromised systems using the BraZetsu malware framework. BraZetsu employs a modular architecture and AI-driven reconnaissance to optimize target value across various sectors, including banking and government systems. The actor maintains a controlled operational model, requiring customers to spend quickly to limit exposure and risk. Exilware's activities reflect a sophisticated Initial Access Broker operation, transforming compromised systems into commercial assets through automated intelligence gathering.

The group's reported origin is Brazil.

Threat Intelligence

Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.