Telchak Gold Ventures

Reported Context (1)

(last seen October 2025) and 172.94.96[.]75 on TCP/3389 (last seen September 2025, hosted by Telchak Gold Ventures in Germany). The same self-signed RDP certificate appearing across two geographically distinct Operator’s Debug Build Exposes xlabs_v1 DDoS-for-Hire Botnet

Malware (4)

Threat Actors (1)

MITRE ATT&CK (20)

Vendors (4)

Products (2)

Tools (6)

Countries (2)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.