OPSEC Failure Exposes Coquettte’s Malware Campaigns on Bulletproof Hosting Servers

A novice cybercrime actor, Coquettte, was discovered using a Russian bulletproof hosting provider, Proton66, to distribute malware disguised as an antivirus service. The threat actor, possibly a student, also operates websites selling guides for illegal substances and weapons, suggesting a connection to a broader hacking group called Horrid.