El agente anticipó la detección de tráfico anómalo y armó un C2 encodeado en sandbox. Prácticamente indetectable. Lo vimos recién post-mortem. #ciberseguridad #redteam #c2

NGC2: 93,6 εκατ. δολάρια σε εννέα εταιρείες για εφαρμογές διοίκησης και ελέγχου, με επόμενο αποδέκτη το I Corps στον Ειρηνικό. Διαβάστε για την κοινή ψηφιακή βάση επιχειρησιακών δεδομένων: flight.com.gr/usa-ar... #NGC2 #USArmy #C2

I integrated Moonwalk++ into Bahamut: every WinHTTP call runs behind a spoofed caller chain while the agent's image is RC4-encrypted and PAGE_NOACCESS original SystemFunction032 + static "MyTest1" key.
#RedTeam #windows #EDR #C2 #cybersecurity

Vasilek backdoor embedded in VMware Tools targets healthcare orgs with multi-layered C2 — a stealth outbreak. #cybersecurity #malware #Vasilek #VMware #Healthcare #Malware #C2 #Cybersecurity https://thedailytechfeed.com/hackers-embed-vasilek-backdoor-in-vmware-tools-to-spy-on-hospitals/

notRDP: Havoc C2 plugin creates invisible Windows desktops via CreateDesktopW, streams JPEG to browser viewer, injects input via PostMessage. Variant captures real desktop with keystroke logging. #redteam #c2 #tool https://github.com/dagowda/notRDP

Stat of the week:
295 distinct domains tied to command and control, and malware distribution, turned up in enterprise traffic Netskope saw this week, down 12% from 335 the week before. Hundreds of live C2 domains a week is the steady state. #C2 #threatintel

And special thanks to @5pider.net for recommending this technique to me
Refs: github.com/susMdT/LoudS...
dtsec.us/2023-09-15-S...
#redteam #C2 #windows #EDR #CRTL

PamStealer’s new macOS strain adds live C2 decryption and heavy persistence—static analysis just won’t cut it. #MacOS #Malware #Cybersecurity #ThreatIntel #PamStealer #C2 https://thedailytechfeed.com/pamstealer-macos-malware-reinvents-payload-security-persistence/

２０２６年６回浦和２日４R３連複 #浦和4R #C2 #ジーティースワット #ブルドッグガール #メイショウセオト #浦和競馬

Massively redundant pathways will be maintained between clusters as executable files are hollowed out to maintain c2 command and control nodes.

Blockchain com paths between c2 structures for crowd attack scenarios can rapidly shift routing as the rogue networks take shape.

#llm #com #c2 #infosec

📰 Hacker Berbahasa Mandarin Eksploitasi WordPress dan Zyxel untuk Curi Data Pemerintah

👉 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/23/hacker-china-eksploit-wordpress-zyxel-curi-data-pemerintah/

#c2 #chineseHackers #chineseThreatActor #cve-2023-54391 #cve-2026-34908 #cve-202

So we called ahead and got full permission for a cosplay shoot inside the cathedral... but after 20 minutes, they asked us to leave. 😅 At least we got a few pics!

Wig: #cakycos
#cc #codegeass #c2

Linux servers now facing MQTT-based backdoor called BambooToken that hides commands and exfiltrates files. #MQTT #Linux #Backdoor #C2 #CyberSecurity #ThreatIntel https://thedailytechfeed.com/new-bambootoken-linux-backdoor-leverages-mqtt-for-remote-control/

📢 OneDrive UDC2 : un canal C2 Cobalt Strike utilisant OneDrive comme couche de transport

Cet article présente un outil offensif permettant d'utiliser Microsoft OneDrive for Business comme couche de transport pour un canal…

🟡 vérification factuelle moyenne
#C2 #CobaltStrike #Cyberveille

Zilean is working properly in Bahamut !!!! It’s been a good experiment with Sleepmask as a replacement for Ekko. What’s more, there’s no documentation on Zilean (I think my AI assistant has got the blues and my hands are aching).
#redteam #UDRL #mythicc2 #cybersecurity #C2 #windows #EDR

This is fantastic: malware that uses MQTT for command and control. I looked into MQTT for a side project that never went anywhere, it's well thought out.

https://securityaffairs.com/199205/malware/bambootoken-the-malware-that-speaks-mqtt-to-stay-under-the-radar.html

#malware #c2