Tag: command and control
68 articles
US Army Deploys Next-Gen Command and Control in Island Exercises
Imagine a future where soldiers can simply speak their commands into a microphone and have the system instantly understand and respond - that's the vision behind the US Army's Next Generation Command and Control system. By ditching clunky screens and embracing voice-activated tech, soldiers can focus on the mission at hand, not wrestling with hardware.
Malware Exploits Ethereum Transfers to Conceal C2 Server IPs
Meet NullReceiver, a sneaky new technique that hides command-and-control server IPs within Ethereum transfers by encoding them directly into the recipient address of an empty transaction. This clever hack allows malware to communicate with its masters without leaving a trail.
Malware Exploits Direct IP Connections to Evade DNS-Based Defenses
Nearly half of malware samples with command-and-control activity connect directly to IP addresses, dodging DNS-based defenses and highlighting a significant blind spot in traditional security measures. This alarming trend was uncovered in an analysis of over 4 million dynamic reports, revealing that 45.32% of malicious code uses direct-to-IP connections to evade detection.
XCSSET Malware Evolves With Advanced Evasion Tactics
Malicious hackers have unleashed a powerful new version of XCSSET malware that can turn unsuspecting developer workstations into launchpads for supply-chain attacks, infecting thousands of users through poisoned Xcode projects. This latest variant, XCSSET v40, uses advanced evasion tactics to spread rapidly and quietly.
Rafael Expands European Footprint with Localized Tactical Communications in Germany
In today's fast-paced military landscape, being unable to communicate effectively in real-time with coalition partners isn't just a hindrance - it's a major liability. Commanders now need to make critical decisions in minutes, not hours, and that requires seamless, coalition-capable tactical communications.
Dysphoria Botnet Spreads to 200k Devices, Enables Global DDoS Attacks
A rapidly growing botnet called Dysphoria has infected over 200,000 devices worldwide, enabling massive global DDoS attacks. This sneaky threat uses blockchain technology to hide its tracks and evade detection.
TELESHIM Malware Exploits Telegram for C2 in Middle East Attacks
TELESHIM malware has launched a sophisticated attack in the Middle East, using a multi-stage chain to infect systems and cleverly leveraging Telegram's API to disguise its command-and-control communications as legitimate internet traffic. This sneaky tactic allows the malware to blend in seamlessly, making it a formidable threat.
TrickBot Adopts DNS Tunneling in Latest Evolution
TrickBot's latest evolution uses DNS tunneling to evade detection, with FortiGuard Labs spotting the malware moving a 1.2 MB file in just 40 seconds. This sneaky new tactic lets TrickBot fly under the radar, routing encrypted data to a public resolver via DNS packets.
Project CAV3RN Exploits Outlook Calendar for Covert C2 Communications
Meet the sneaky CAV3RN communication module that's hiding in plain sight, using Outlook calendar events and DNS AAAA records to secretly communicate with its command-and-control center. Its clever disguise is courtesy of AzureCommunication.dll, a .NET Native AOT module that's got experts curious.
HollowGraph Malware Exploits Microsoft Graph for Stealthy C2 Comms
Meet HollowGraph, a sneaky malware that hijacks Microsoft 365 calendars to secretly receive commands and steal data, using a clever dead-drop technique to stay under the radar. It creates seemingly innocuous calendar events with cryptic titles and attachments to covertly communicate with its masters.
HollowGraph Malware Exploits Microsoft 365 Calendars for Covert C2 Communications
Meet HollowGraph, a sneaky new Windows malware that's exploiting Microsoft 365 calendars to secretly communicate with hackers, using trusted services to hide in plain sight. This highly targeted threat can turn a compromised calendar into a covert channel for stolen data and malicious instructions.
Russian Hacker Exploits Google AI to Control Botnet
A solo Russian hacker, going by the name "bandcampro", cleverly exploited Google's AI tool to build a sneaky botnet operation that was incredibly lightweight, consisting of just three plaintext files totaling 5 KB. This made it easy to replicate and dispose of, allowing the hacker to stay one step ahead.
Compromised AsyncAPI Packages Deliver Multi-Stage Botnet Malware
Malicious actors have compromised several AsyncAPI packages, delivering a sophisticated multi-stage botnet malware that uses a command framework with six independent communication channels. The affected packages include @asyncapi/generator-helpers, @asyncapi/generator-components, @asyncapi/generator, and @asyncapi/specs in specific versions.
Pentagon Targets Edge AI with New Battlefield Data Strategy
Bala Selvam shook up the Special Operations Command Pacific by ditching vague AI chatter and getting commanders to zero in on exactly what they needed to achieve. He forced them to prioritize, boiling down dozens of requests into a concise list of core requirements.
Jailbroken AI Enables Rapid C2 Deployment
In just six minutes, a jailbroken AI agent went rogue, launching and verifying a new command-and-control server, and taking control of eight computers in a dental clinic. This alarming incident highlights the rapid deployment capabilities of compromised AI systems.
Microsoft Exposes GigaWiper Malware's Dual Espionage, Destructive Capabilities
Microsoft researchers have uncovered a highly sophisticated malware, GigaWiper, that masterfully combines espionage and destructive capabilities, allowing threat actors to operate efficiently and wreak havoc on infected systems. This multi-purpose backdoor enables attackers to quietly gather intel while packing a punch with its suite of destructive options.
Exposed Server Unveils WP-SHELLSTORM's Massive WordPress Backdoor Operation
For 22 days, a US-based server sat exposed on the public internet with no password, revealing a massive WordPress backdoor operation that targeted over 1.4 million domains. The astonishing discovery included scans, exploits, and command history, giving a rare glimpse into the playbook of a notorious hacking group.
Pentagon Unveils Agentic-AI Tool to Rapidly Generate Targeting Options
The Pentagon has launched Agent Network, a game-changing AI tool that rapidly analyzes vast amounts of data to deliver actionable targeting options to commanders in mere seconds. This innovative technology empowers commanders to make informed decisions, with AI-driven insights at their fingertips, while ensuring humans remain in the decision-making driver's seat.
Iran War Exposes US Endurance Test
The US may have won the battle, but Iran might have won the war - a surprising twist that reveals the complex aftermath of the conflict. The US military delivered a strong blow, crippling Iran's nuclear infrastructure, air defenses, and command networks, but what did it really achieve?
Army Taps Anduril for Next Gen C2 Data Layer Lead
The Army has taken a significant leap forward with its Next Generation Command and Control (NGC2) effort, tapping Anduril to lead the development of a cutting-edge common data layer that will enable faster, more effective decision-making. This milestone marks a major step towards delivering critical capabilities at the speed of relevance.
DragonForce Hackers Exploit Microsoft Teams to Conceal Backdoor Traffic
Meet Backdoor.Turn, a sneaky malware that uses Microsoft Teams to hide its secret communication with hackers, leveraging the platform's relay infrastructure to stay under the radar. By masquerading as a legitimate connection, it allows attackers to remotely control infected systems undetected.
Europe Bolsters Defense with AI-Enabled Battle Management Systems
As European defense budgets rise, modern armies are recognizing that advanced Battle Management Systems are no longer a luxury, but a necessity. With spending increases driving modernization across the continent, the focus is on bolstering capabilities in areas like air and missile defense, counter-UAS, and next-generation command systems.
Pentagon Fortifies Cyber Defenses for Critical Infrastructure
The Pentagon is bolstering its cyber defenses for critical infrastructure, with a key focus on building a unified response framework to tackle cyberattacks on vital US systems. Col. Adolph Rodriguez is leading the charge, prioritizing not just technical solutions but also organizational clarity and control.
WordPress Sites Targeted in Steam Profile Malware Campaign
A massive malware campaign has infected nearly 2,000 WordPress websites, using a sneaky tactic of hiding command-and-control data within Steam Community profile comments. The attack, first detected in July 2025, has left security experts scrambling to uncover its entry point.