Vault Viper Exploits Online Gambling Websites Using Custom Browser to Install Malicious Program

**Executive summary:** Infoblox and related reporting detail a criminal campaign in Southeast Asia distributing a modified Chromium browser (Universe Browser) via illegal gambling sites; the software routes traffic through actor-controlled servers, embeds RAT-like capabilities (keylogging, proxy/C2 management), uses anti-analysis techniques, and persists via startup registry and service components, with connections to the Vault Viper (Baoying Group/BBIN) ecosystem and observable C2 domains and file artifacts.