Threat Actor
ROI777
- First Reported
- Oct 15, 2026
- Latest Reported
- Oct 15, 2026
Reported Context (2)
- Traffic monetization operation linked to Hotejka; its infrastructure was associated with malicious redirection and the Operation Prowli campaign. Help TDS Linked to Hotejka as More Than 20,000 Cloudflare Pages Domains Host Tech Support Scams
- Historical operator of the precursor to Help TDS; the article assesses Hotejka as its rebrand. Researchers Link Hotejka to Help TDS and Detect Its Cloudflare Pages Domains in Advance
Malware (1)
People (1)
Threat Actors (5)
MITRE ATT&CK (5)
Vendors (2)
Products (4)
Tools (1)
Countries (7)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.