Exilware
Exilware is a Brazil-attributed cybercrime syndicate with a financial motive, tracked by Brandefense. It targets 3 sectors, including Manufacturing and Finance, in Brazil and Sweden. It uses 6 MITRE ATT&CK techniques.
- Origin
- Brazil
- Techniques
- 6
- Exploited CVEs
- No CVE data
- Record updated
Who They Target.
About Exilware.
Exilware is a Brazilian threat actor operating the "Infect Marketplace," which commercializes access to compromised systems using the BraZetsu malware framework. BraZetsu employs a modular architecture and AI-driven reconnaissance to optimize target value across various sectors, including banking and government systems. The actor maintains a controlled operational model, requiring customers to spend quickly to limit exposure and risk. Exilware's activities reflect a sophisticated Initial Access Broker operation, transforming compromised systems into commercial assets through automated intelligence gathering.
Last updated Oct 9, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.