Dedik
A compromised dedicated server or RDP host, rented out as anonymous infrastructure. The underground's cloud computing, billed to someone else.
Why it matters to you
Your servers can be inventory. An unexplained RDP listing matching your IP range means the breach already happened.
Where we meet it
Dedik listings carry geography and ASN, which is why they land in our infrastructure analytics rather than only in a search result. A cluster of them in one ASN is a story about a hosting provider, not a single victim.
Connected terms
Access listing
The IAB's ad format: industry, country, revenue, access level and price. Everything except the victim's name, which is disclosed to serious buyers in private.
Jabber
The underground's legacy messenger of choice for closing deals. Forums are the storefront; price, samples and delivery move to Jabber, which is federated, self-hostable and off the platforms' radar.
Bulletproof hosting
Hosting sold on the promise that abuse complaints go unanswered and legal requests go unread. Priced well above ordinary hosting, because that indifference is the entire product.
Read elsewhere
Where this term stops being vocabulary
Malveine is where you watch it happen to you
Knowing the word is the cheap half. The platform is the half where the term arrives attached to your domain, with a timestamp and the source it came from.
More from the infrastructure
Antidetect browser
A browser built to present a consistent, disposable fingerprint per profile: its own canvas, fonts, timezone and proxy. Sold so a stolen session can be replayed from a machine that looks like the victim's.
Bulletproof hosting
Hosting sold on the promise that abuse complaints go unanswered and legal requests go unread. Priced well above ordinary hosting, because that indifference is the entire product.
C2 panel
The web console an operator uses to run infected machines: victims listed, tasks queued, output collected. Sold with the malware, screenshotted in the advertisement, and often the most revealing artifact a crew produces.
Crypto mixer
A service that pools cryptocurrency from many senders and pays out from the pool, so that the link between an incoming and an outgoing transaction is broken. Charged as a percentage, sometimes with a delay bought separately.