Tag: command and control
68 articles
CrowdStrike and Google Disrupt Glassworm Botnet Infrastructure
In a major win for cybersecurity, a powerful collaboration between CrowdStrike, Google, and the Shadowserver Foundation successfully dismantled the Glassworm botnet by simultaneously taking down all four of its command-and-control channels. This bold move cut off the botnet's operators from infected devices, preventing further malicious activity.
Glassworm botnet disrupted by takedown of resilient C2 infrastructure
In a major win for cybersecurity, researchers from CrowdStrike, Google, and The Shadowserver Foundation have successfully disrupted the Glassworm botnet by dismantling its complex command-and-control infrastructure. This takedown cuts off the lifelines of the threat actors, halting their campaigns that had been ongoing since October 2025.
Webworm Expands Arsenal with EchoCreep, GraphWorm Backdoors
Meet Webworm's latest tricks: EchoCreep and GraphWorm, two custom backdoors that let the China-aligned actor control and manipulate systems using unconventional channels like Discord and Microsoft Graph API. These new tools enable file uploads, downloads, and command execution, showcasing Webworm's creative approach to cyber threats.
Army Unveils Autonomy Office to Integrate Unmanned Systems
The Army has launched its Capability Program Executive Office for Mission Autonomy, a game-changing hub that will integrate unmanned systems like drones and ground robots to create adaptable, mission-ready packages. This innovative office will translate human intent into action, dynamically adjusting plans as needed to revolutionize the way commanders tackle complex tasks.
TrickMo Malware Adopts TON Blockchain for Covert Command-and-Control
Meet Trickmo.C, a sneaky new variant of the TrickMo Android banker that's been hiding in plain sight as a TikTok or streaming app, targeting unsuspecting users in France, Italy, and Austria since January. This cunning malware has evolved to use the TON blockchain for covert command-and-control, making traditional domain takedowns a thing of the past.
Air Force Seeks AI Integration in Air Ops Command System
The Air Force is taking a major leap forward by exploring the integration of AI into its Air Operations Command system, with the goal of equipping planners and operators with cutting-edge tools to stay ahead in the game. By engaging with industry leaders, the government aims to spark innovation and maximize competition for this critical upgrade.
Army Hosts Hackathons to Integrate Dozens of Military Systems
The Army is shaking things up with a series of hackathons called "Right to Integrate," where vendors will gather for a one-day brainstorming session to make their software and systems more compatible, with the goal of integrating dozens of military systems for seamless communication and data sharing. This move aims to give the Army a game-changing edge on the battlefield by enabling its systems, weapons, and sensors to talk to each other like never before.
Harvester Expands Linux Arsenal with GoGra Backdoor in South Asia
Harvester's Linux arsenal just got a boost with the deployment of the GoGra backdoor in South Asia, enabling the threat actor to sneak past traditional network defenses by hijacking legitimate Microsoft Graph API and Outlook mailboxes. This latest move is linked to Harvester's earlier espionage campaigns targeting key sectors in the region.
US Struggles to Replicate Ukraine's Robot Navy Model
The US is struggling to replicate Ukraine's innovative robot navy model, but a key challenge lies in balancing human leadership with cutting-edge automation. As robo-boats multiply, one thing is clear: humans will remain at the helm, making crucial command and control decisions.
Malicious Chrome Extensions Exfiltrate User Data
Malicious actors have hijacked 108 Google Chrome extensions, quietly harvesting user data and turning every webpage into a playground for ad injection and code execution - putting around 20,000 users at risk. This sneaky campaign, discovered by cybersecurity researchers, uses a single command-and-control system to wreak havoc on unsuspecting browsers.
Army Accelerates C2 Modernization with New Command Plans
The US Army is ramping up its C2 modernization efforts with bold new command plans, and a recent high-profile discussion with journalist Mark Pomerleau on the Pentagon Buzz is giving defense insiders a glimpse into what's next. With senior leaders like Joseph Welch, the Army's PAE C5ISR, taking center stage, it's clear that C2 modernization is a top priority.
New Trojan STX RAT Targets Finance Sector with Sophisticated Stealth Methods
Meet STX RAT, a sneaky new remote access trojan that's got its sights set on the finance sector, using advanced stealth methods and command-and-control capabilities to evade detection. This latest threat is a wake-up call for defenders, testing their readiness to respond to increasingly sophisticated attacks.
DPRK Hackers Exploit GitHub in Multi-Stage Attacks on South Korea
DPRK hackers have cleverly repurposed GitHub as a secret command center to launch multi-stage attacks on organizations in South Korea. This sneaky tactic starts with obfuscated Windows shortcut files, highlighting the growing creativity of North Korean threat actors.
GitHub Exploited in Sophisticated Malware Campaign
Malicious actors have launched a sophisticated malware campaign that exploits GitHub as a covert command-and-control channel, using trusted platforms to evade detection and wreak havoc on unsuspecting organizations. This multi-stage threat employs LNK files, embedded decoders, and PowerShell to establish persistence and exfiltrate sensitive data.
ShadyPanda Stunning Scheme Damages 4.3M Chrome & Edge
Think twice before clicking Add to Chrome—a sprawling campaign called ShadyPanda used dozens of seemingly helpful browser extensions to secretly siphon data from an estimated 4.3 million Chrome and Edge users. By cloning listings and routing telemetry to shared command-and-control endpoints, attackers turned legit marketplaces into a stealth distribution network that slipped past detection.
FlexibleFerret Exclusive: Dangerous macOS Go Backdoor
Think a harmless Mac script cant hurt? FlexibleFerret proves otherwise — a modular, multistage campaign that uses staged shell/AppleScript and a Go-based backdoor to quietly harvest credentials and maintain stealthy, long-term access across macOS systems.
flawless IT support: Must-Have Best Defense
Flawless IT support is a frontline lifeline—when VPNs, patches, or helpdesk queues fail, missions falter and lives are at risk. Investing in resilient networks, rapid response, and user-centered tools is essential to keep warfighters safe and effective.
modern C2 centers: Must-Have Resilience for Victory
As battlefields blur and speed trumps certainty, modern C2 centers face three urgent hurdles: turning overwhelming, messy data into rapid, trustworthy decisions; staying resilient when networks and sensors are jammed or hacked; and knitting multinational, misaligned systems into a single, trusted command. Solving them will mean smarter tech, tougher doctrine, and real-world drills that bind militaries, industry and allies together.
C2 centers: Must-Have Resilience for Best Survival
When the map is incomplete, radios go quiet, and drones, jammers and deception probe your nerve centers, modern C2 centers face three linked challenges—information overload and trust, contested communications, and coalition interoperability—that will decide whether commanders can see, decide and act faster than the enemy. The Ukraine war shows we must prioritize explainable data fusion, layered resilient comms, and federated interoperability now, or risk losing the advantage on tomorrow’s battlefields.
Agile Combat Employment: Essential & Risky Shift
Can a force built for big bases learn to fight from improvised strips under missile, cyber, and electronic attack? Agile Combat Employment (ACE) answers with small, mobile teams, palletized maintenance, and decentralized command to make aircraft harder to find, faster to move, and far more resilient in a contested world.