Tenable

New Guidance on Risks from Bulletproof Hosting Providers

First seen 19 Nov 2025, 23:17 UTC • Cisa

•93% similarity •23.6

Ask AI about this cluster

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Recent guidance has been issued to mitigate risks associated with bulletproof hosting providers, which are often used by cybercriminals to host malicious content. This guidance comes from cybersecurity authorities, including CISA, and aims to protect organizations from potential threats posed by these services.

ThreatCluster AI

Attack Flow

21 entities, 31 inferred relationships (STIX 2.1).

Technique (5)

Malware
Phishing
Ransomware
T1047 - Windows Management Instrumentation
T1566 - Phishing

Campaign (1)

Shields Up

Malware (7)

Agent Tesla
CoinMiner
Gh0st
Jinupd
Lumma Stealer
SocGholish
TeleGrab

Affected Platform (8)

AlmaLinux OS 10
Apple IOS/iPadOS 18
FortiGate 7.4.x
IBM Z/OS
Microsoft Intune
Red Hat Enterprise Linux 10
Rocky Linux 10
Windows Server 2025

Relationships

Shields Up uses Agent Tesla
Shields Up uses CoinMiner
Shields Up uses Gh0st
Shields Up uses Jinupd
Shields Up uses Lumma Stealer
Malware targets AlmaLinux OS 10
Malware targets Apple IOS/iPadOS 18
Malware targets FortiGate 7.4.x
Malware targets IBM Z/OS
Phishing targets AlmaLinux OS 10
Phishing targets Apple IOS/iPadOS 18
Phishing targets FortiGate 7.4.x
Phishing targets IBM Z/OS
Ransomware targets AlmaLinux OS 10
Ransomware targets Apple IOS/iPadOS 18
Ransomware targets FortiGate 7.4.x
Ransomware targets IBM Z/OS
T1047 - Windows Management Instrumentation targets AlmaLinux OS 10
T1047 - Windows Management Instrumentation targets Apple IOS/iPadOS 18
T1047 - Windows Management Instrumentation targets FortiGate 7.4.x
T1047 - Windows Management Instrumentation targets IBM Z/OS
T1566 - Phishing targets AlmaLinux OS 10
T1566 - Phishing targets Apple IOS/iPadOS 18
T1566 - Phishing targets FortiGate 7.4.x
T1566 - Phishing targets IBM Z/OS
Shields Up related to SocGholish
Shields Up related to TeleGrab
Shields Up related to Microsoft Intune
Shields Up related to Red Hat Enterprise Linux 10
Shields Up related to Rocky Linux 10
Shields Up related to Windows Server 2025

Community

Browse all →

Tracked Entities in This Story

Agent Tesla CoinMiner Gh0st Jinupd Lumma Stealer SocGholish Shields Up AlmaLinux OS 10 Apple IOS/iPadOS 18 FortiGate 7.4.x IBM Z/OS Microsoft Intune Red Hat Enterprise Linux 10 Financial Malware Phishing Ransomware

New Guidance on Risks from Bulletproof Hosting Providers

Ask AI about this cluster

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Community

Continue Reading

Tracked Entities in This Story