Novice Cybercriminal Uses Russian Bulletproof Hosting for Operations

A novice cybercriminal actor has been observed using the services of a Russian bulletproof hosting provider called Proton66 to facilitate their operations. DomainTools detected this activity after discovering a fake website named cybersecureprotect[.]com, hosted on Proton66, posing as an antivirus service. The threat intelligence firm reported this discovery.