{
  "name": "Pakistani freelancers building cracking websites for stealer-delivery",
  "slug": "pakistani-freelancers-building-cracking-websites-for-stealer-delivery",
  "description": "This analysis reveals a network of Pakistani freelancers creating websites for cracked software distribution, potentially linked to stealer malware campaigns. The report identifies specific email addresses, domain names, and hosting providers associated with these activities. It highlights the use of pay-per-install models and the involvement of freelance web developers in building and promoting cracking websites. The analysis also touches on Pakistan's cybersecurity landscape, including closer ties with China and Russia, and the challenges in prosecuting cybercriminals due to the lack of extradition treaties. The report provides actionable intelligence, including numerous indicators of compromise and recommendations for organizations to protect against these threats.",
  "published": "2025-07-02T05:13:38+00:00",
  "created_at": "2025-07-02T05:13:38+00:00",
  "modified_at": "2025-07-02T05:44:53+00:00",
  "created_at_opencti": "2025-07-02T05:13:38+00:00",
  "author": "",
  "confidence": null,
  "report_types": [],
  "labels": [],
  "tags": [
    "2025-07-02",
    "cracking websites",
    "hosting providers",
    "pakistani freelancers",
    "pay-per-install",
    "stealer malware"
  ],
  "related_entities": {
    "observables": [
      {
        "id": "",
        "name": "45.12.1.30"
      },
      {
        "id": "",
        "name": "195.66.210.98"
      },
      {
        "id": "",
        "name": "ns1.filescrack.com"
      },
      {
        "id": "",
        "name": "1.filescrack.com"
      },
      {
        "id": "",
        "name": "zubicrack.com"
      },
      {
        "id": "",
        "name": "zippycrack.net"
      },
      {
        "id": "",
        "name": "zamilcrack.com"
      },
      {
        "id": "",
        "name": "witter.co"
      },
      {
        "id": "",
        "name": "vstworking.net"
      },
      {
        "id": "",
        "name": "vstsoftware.net"
      },
      {
        "id": "",
        "name": "vstupcrack.com"
      },
      {
        "id": "",
        "name": "vstsoft.net"
      },
      {
        "id": "",
        "name": "vstserial.com"
      },
      {
        "id": "",
        "name": "vstsetup.net"
      },
      {
        "id": "",
        "name": "vstprocracker.com"
      },
      {
        "id": "",
        "name": "vstpirate.net"
      },
      {
        "id": "",
        "name": "vstpro.org"
      },
      {
        "id": "",
        "name": "vstpincrack.com"
      },
      {
        "id": "",
        "name": "vstmix.com"
      },
      {
        "id": "",
        "name": "vstmania.net"
      },
      {
        "id": "",
        "name": "vstmafia.org"
      },
      {
        "id": "",
        "name": "vstmafia.net"
      },
      {
        "id": "",
        "name": "vstmac.net"
      },
      {
        "id": "",
        "name": "vstmac.org"
      },
      {
        "id": "",
        "name": "vstlicensekey.com"
      },
      {
        "id": "",
        "name": "vstgurucrack.com"
      },
      {
        "id": "",
        "name": "vstjin.com"
      },
      {
        "id": "",
        "name": "vstcyberpc.com"
      },
      {
        "id": "",
        "name": "vstforest.net"
      },
      {
        "id": "",
        "name": "vstcrackpro.net"
      },
      {
        "id": "",
        "name": "vstcracker.com"
      },
      {
        "id": "",
        "name": "vstapps.net"
      },
      {
        "id": "",
        "name": "vstcracked.org"
      },
      {
        "id": "",
        "name": "thiscrack.net"
      },
      {
        "id": "",
        "name": "topcracksofts.com"
      },
      {
        "id": "",
        "name": "topcracked.com"
      },
      {
        "id": "",
        "name": "thesecrack.net"
      },
      {
        "id": "",
        "name": "stcrack.net"
      },
      {
        "id": "",
        "name": "thatcrack.net"
      },
      {
        "id": "",
        "name": "starcrack.org"
      },
      {
        "id": "",
        "name": "softwaresideas.com"
      },
      {
        "id": "",
        "name": "softwarespro.org"
      },
      {
        "id": "",
        "name": "softwaresguru.org"
      },
      {
        "id": "",
        "name": "softwarelink.net"
      },
      {
        "id": "",
        "name": "softwarepatch.net"
      },
      {
        "id": "",
        "name": "softwarelee.org"
      },
      {
        "id": "",
        "name": "softnkey.net"
      },
      {
        "id": "",
        "name": "softserial.org"
      },
      {
        "id": "",
        "name": "soft4mac.org"
      },
      {
        "id": "",
        "name": "soft4mac.net"
      },
      {
        "id": "",
        "name": "smartcrack.org"
      },
      {
        "id": "",
        "name": "shezacrack.com"
      },
      {
        "id": "",
        "name": "serialsoft.net"
      },
      {
        "id": "",
        "name": "securecrack.net"
      },
      {
        "id": "",
        "name": "seriallink.org"
      },
      {
        "id": "",
        "name": "sdcrack.com"
      },
      {
        "id": "",
        "name": "samsoftz.com"
      },
      {
        "id": "",
        "name": "sampc.info"
      },
      {
        "id": "",
        "name": "rack.net"
      },
      {
        "id": "",
        "name": "productcrack.net"
      },
      {
        "id": "",
        "name": "prodownloader.org"
      },
      {
        "id": "",
        "name": "quickideas.org"
      },
      {
        "id": "",
        "name": "procrackz.org"
      },
      {
        "id": "",
        "name": "procrackz.net"
      },
      {
        "id": "",
        "name": "procrackerz.net"
      },
      {
        "id": "",
        "name": "procrackerez.net"
      },
      {
        "id": "",
        "name": "procrackerez.com"
      },
      {
        "id": "",
        "name": "premiumcrack.net"
      },
      {
        "id": "",
        "name": "plugvst.com"
      },
      {
        "id": "",
        "name": "prdownloader.com"
      },
      {
        "id": "",
        "name": "plugcracked.org"
      },
      {
        "id": "",
        "name": "piratecrack.org"
      },
      {
        "id": "",
        "name": "plugcrack.org"
      },
      {
        "id": "",
        "name": "plugcrack.net"
      },
      {
        "id": "",
        "name": "piratcrack.com"
      },
      {
        "id": "",
        "name": "pcsoftz.org"
      },
      {
        "id": "",
        "name": "pesktop.net"
      },
      {
        "id": "",
        "name": "pcsoftnew.net"
      },
      {
        "id": "",
        "name": "pcsoftsfull.org"
      },
      {
        "id": "",
        "name": "pcproductkeys.org"
      },
      {
        "id": "",
        "name": "optimalcrack.com"
      },
      {
        "id": "",
        "name": "mustcrack.com"
      },
      {
        "id": "",
        "name": "mailcrack.net"
      },
      {
        "id": "",
        "name": "mahapc.net"
      },
      {
        "id": "",
        "name": "lescrack.com"
      },
      {
        "id": "",
        "name": "lulupc.net"
      },
      {
        "id": "",
        "name": "leecrack.com"
      },
      {
        "id": "",
        "name": "kingcrack.org"
      },
      {
        "id": "",
        "name": "keygenwin.com"
      },
      {
        "id": "",
        "name": "keygencrack.org"
      },
      {
        "id": "",
        "name": "joincrack.net"
      },
      {
        "id": "",
        "name": "jincrack.com"
      },
      {
        "id": "",
        "name": "installpp.com"
      },
      {
        "id": "",
        "name": "installlink.net"
      },
      {
        "id": "",
        "name": "iamactivator.org"
      },
      {
        "id": "",
        "name": "hacrack.com"
      },
      {
        "id": "",
        "name": "ghazanfarpc.com"
      },
      {
        "id": "",
        "name": "getprocrack.net"
      },
      {
        "id": "",
        "name": "ganjiswag.net"
      },
      {
        "id": "",
        "name": "fullversionpro.net"
      },
      {
        "id": "",
        "name": "fullgetpc.com"
      },
      {
        "id": "",
        "name": "freecrackerz.org"
      },
      {
        "id": "",
        "name": "freemacos.com"
      },
      {
        "id": "",
        "name": "flcs.pk"
      },
      {
        "id": "",
        "name": "extrack.net"
      },
      {
        "id": "",
        "name": "cyberspc.org"
      },
      {
        "id": "",
        "name": "csopakistan.com"
      },
      {
        "id": "",
        "name": "crackword.org"
      },
      {
        "id": "",
        "name": "crackspro.org"
      },
      {
        "id": "",
        "name": "crackpatch.net"
      },
      {
        "id": "",
        "name": "cracknote.net"
      },
      {
        "id": "",
        "name": "cracklee.net"
      },
      {
        "id": "",
        "name": "crackmap.net"
      },
      {
        "id": "",
        "name": "crackking.org"
      },
      {
        "id": "",
        "name": "crackkey4u.com"
      },
      {
        "id": "",
        "name": "crackkeygen.net"
      },
      {
        "id": "",
        "name": "crackjin.net"
      },
      {
        "id": "",
        "name": "crackhouses.net"
      },
      {
        "id": "",
        "name": "crackfix.org"
      },
      {
        "id": "",
        "name": "crackfue.com"
      },
      {
        "id": "",
        "name": "crackex.net"
      },
      {
        "id": "",
        "name": "crackedx.net"
      },
      {
        "id": "",
        "name": "crackdudu.com"
      },
      {
        "id": "",
        "name": "crackdisk.org"
      },
      {
        "id": "",
        "name": "crackboss.net"
      },
      {
        "id": "",
        "name": "crackactivater.com"
      },
      {
        "id": "",
        "name": "crackapps.org"
      },
      {
        "id": "",
        "name": "crack4pro.net"
      },
      {
        "id": "",
        "name": "azharsoft.com"
      },
      {
        "id": "",
        "name": "crack-vst.com"
      },
      {
        "id": "",
        "name": "ayeshapc.org"
      },
      {
        "id": "",
        "name": "ayeshapc.net"
      },
      {
        "id": "",
        "name": "ashcrack.com"
      },
      {
        "id": "",
        "name": "andicrack.com"
      },
      {
        "id": "",
        "name": "activecrack.org"
      },
      {
        "id": "",
        "name": "alghazalimodelschool.com"
      },
      {
        "id": "",
        "name": "abdullahpc.org"
      },
      {
        "id": "",
        "name": "9to5mac.org"
      }
    ],
    "attack_patterns": [
      {
        "id": "7616ff60-a18f-4663-9824-b889aa01c8ce",
        "name": "T1588"
      },
      {
        "id": "9c5a20d1-0df9-4e99-bcc5-0b731a78b5d1",
        "name": "T1608"
      },
      {
        "id": "1e043fe4-2413-4b8e-887c-0fe45d095a24",
        "name": "T1583"
      },
      {
        "id": "a72ebeae-8e62-4039-8135-e9c611011fdc",
        "name": "T1573"
      },
      {
        "id": "dc342445-1b78-48b4-aa06-89ed2ad7c28e",
        "name": "T1071"
      },
      {
        "id": "870bd958-53a3-4d25-9f23-00aa8bd6674d",
        "name": "T1102"
      },
      {
        "id": "50514c04-b3a2-4abf-a855-e3a434200c87",
        "name": "T1204"
      },
      {
        "id": "81ee4813-4f68-4984-bec1-980d7c5b56eb",
        "name": "T1132"
      },
      {
        "id": "c340d47a-2ea8-41ca-9a0b-a72559b89bbf",
        "name": "T1584"
      },
      {
        "id": "d9b45b3b-d093-4016-89e9-48f31ff4d05d",
        "name": "T1566"
      },
      {
        "id": "6c8f8a40-2746-4a37-86bd-81e82afa6e62",
        "name": "T1190"
      },
      {
        "id": "b9eab970-53dd-4977-9a26-c4fe566e422d",
        "name": "T1133"
      }
    ],
    "others": [
      {
        "id": "",
        "name": "Pakistan"
      }
    ]
  },
  "external_refs": [
    "https://www.intrinsec.com/wp-content/uploads/2025/06/TLP-CLEAR-Pakistani-Freelancers-EN.pdf",
    "https://otx.alienvault.com/pulse/6864dc229b132a5ca4e3add8"
  ]
}