Brut. is a privately owned company headquartered in France, founded in 2016, and employs approximately 440 people. Functioning as a tier 1 media tech buyer, the company specializes in online audio and video media, creating short-form video content.
Brutus has recently evolved into an engine capable of discovering identities, testing them across platforms, and confirming their validity, underscoring that credentials remain the most direct path for attackers, who often exploit valid username and password pairs from breaches, reused across internal services, or unchanged vendor defaults. Previously, on March 14, 2026, a deep-dive highlighted Brutus’s use of WebAssembly to detect and interact with sticky-keys backdoors. This development marked a practical shift in both red-team tooling and defender automation for hardening Remote Desktop Protocol (RDP), a commonly abused pathway into Windows systems. This followed an event on March 13, 2026, where a penetration tester discovered a sticky keys backdoor on an RDP login screen by pressing the shift key five times, leading to unauthenticated remote code execution.
Subscribe for full access to Brut.'s products in full detail 
