Conclusion : While definitive nation‑state attribution is not possible, the campaign exhibits the hallmarks of a (financially driven, modular malware, infrastructure hopping).
The string "zeroend.hotzone18.com" functions as a unique identifier for a platform that has been described as a space for content creation and immersive experiences. The "-release" suffix indicates a stable or notable deployment of this platform’s services. Key aspects of recent releases often include: zeroend.hotzone18.com-release