Brazilian Access Broker Targeting Latin America: Mapping BraZetsu Infrastructure Beyond the Published IOCs

This HuntSQL-based analysis traces BraZetsu-related infrastructure (C2 and control panel) from a Contabo VPS (38.242.246.176) to a Njalla VPS (80.78.27.252), documents persistent Hestia Control Panel certificates and ports (8083/8443/2083), supplements published IOCs with additional IPs, hostnames and certificate hashes, maps attacker tactics to MITRE ATT&CK, and provides detection/hunting queries and response guidance for defenders.