UPDATE: Cloudzy Command and Control Provider Report

Halcyon Research published a report alleging that Cloudzy — an ISP/hosting provider — has been acting as a Command-and-Control Provider (C2P), facilitating infrastructure for ransomware affiliates, criminal syndicates, a sanctioned spyware vendor, and APT groups tied to multiple nation-states; Halcyon estimated roughly 40–60% of Cloudzy activity was malicious. The blog highlights potential IOCs (e.g., 167.88.168.99 and DuckDNS hostnames), customer IP leasing concerns raised by IPXO, evidence of fictitious corporate records and linked entity abrNOC activity, and ongoing community investigation and collaboration requests.