#Cloudzy

Malware/Tool

2023-08-01 • Ransomware Command-and-Control Providers Unmasked by Halcyon Researchers

Cloudzy is a virtual private server and hosting provider, not malware, whose infrastructure has supported malicious operations. BlueNoroff ClickFix systems used Cloudzy-hosted domains for Windows and macOS payload delivery, rotating Zoom and Teams typosquats, and fake-meeting communications through XMPP and TURN services. Separate research linked anonymous, cryptocurrency-funded Cloudzy RDP servers to ransomware affiliates deploying BlackBasta and Royal and to multiple state-linked groups.

Tagged Reports

« Back