Browsing: C2

Fast Facts Toy Ghouls has developed sophisticated custom backdoors that communicate via MQTT and the…

Fast Facts Threat actors are leveraging trusted, signed Node.js runtimes and malicious scripts to deploy…

Fast Facts Malware-laced Composer themes on Vietnamese streaming sites inject JavaScript for ad-fraud, gambling redirects,…

Fast Facts The Fire Ant actor compromised Cisco IOS XR routers, turning them into collection…

Quick Takeaways Threat actors, including Chinese-speaking TA4922, are actively selling and deploying a modular RAT…

Top Highlights The Ivanti EPMM attacks involved malicious subdomains and domains with links to typosquatting,…

Essential Insights The StopAndProtect operation hijacks thousands of hacked WordPress sites to distribute malware, steal…

Fast Facts Iranian state-sponsored hackers leverage the Cavern framework’s modular, DNS- and Google Apps Script-based…

Essential Insights The Evooo1Bot Linux botnet leverages Mirai code, using known vulnerabilities (e.g., CVE-2021-46422, CVE-2025-55583)…

Fast Facts Threat actors are repurposing millions of expired domains daily, leveraging their existing trust…