Command and Control

10 posts

Malware on the Blockchain: An Ongoing Campaign's New WebRTC Twist

Malware Command and Control

Malware on the Blockchain: An Ongoing Campaign's New WebRTC Twist

August 31, 20265 min read

Shared beacon code that fingerprints the visitor (browser, OS, device, country), encrypts the record with ECDH P-256 and AES-GCM, and posts it to the collect endpoint

Malware Social Engineering

EtherHiding in the Browser: ClickFix Chain Ends in Amatera

August 25, 202612 min read

Blockchain Dead Drop Resolvers Explained

Malware Command and Control

Blockchain Dead Drop Resolvers Explained

August 18, 20265 min read

Cloud Threats Memo: New Malicious Campaign Using GitHub for Command and Control

February 2, 20222 min read

Cloud Command and Control

Cloud Threats Memo: Exploiting Legitimate Cloud Services for Command and Control

January 14, 20222 min read

SquirrelWaffle: New Malware Loader Delivering Cobalt Strike and QakBot

Malware Command and Control

SquirrelWaffle: New Malware Loader Delivering Cobalt Strike and QakBot

October 7, 20216 min read

Microsoft Office Document Triggering New Zero-Day

Vulnerability Malware

Microsoft Office Document Triggering New Zero-Day

September 13, 20214 min read

Cloud Threats Memo: Preventing the Exploitation of Dropbox as a Command and Control

July 8, 20211 min read

MalCon Recap

MalCon Recap

November 19, 20191 min read

Why the Future of Command and Control is the Cloud

Why the Future of Command and Control is the Cloud

August 10, 20193 min read