Browsing: C2

Essential Insights The Evooo1Bot Linux botnet leverages Mirai code, using known vulnerabilities (e.g., CVE-2021-46422, CVE-2025-55583)…

Fast Facts Threat actors are repurposing millions of expired domains daily, leveraging their existing trust…

Summary Points APT37 used spearphishing and malicious LNK files to install NarwhalRAT, enabling data theft…

Top Highlights Cybercriminals, possibly linked to North Korea, are evolving blockchain-based command-and-control techniques by embedding…

Summary Points DOUBLECUP uses steganographic PNG images and environmental keying for malware delivery, enabling covert,…

Top Highlights Modern ransomware groups employ legitimate tools (e.g., Sliver, native admin tools) and compromised…

Quick Takeaways The Larva-24009 actor primarily uses phishing emails with decoy documents and LNK malware…

Top Highlights Chinese threat actors are deploying sophisticated, memory-resident backdoors (OctLurk and SilkLurk) to conduct…

Fast Facts Attackers use a multi-stage chain involving a Go-based loader (HollowFrame) and Rust-based backdoor…

Essential Insights North Korean-linked threat actors utilize sophisticated macOS malvertising campaigns that induce panic through…