DuckDNS: Free Dynamic DNS Service
DuckDNS is a free dynamic DNS service used by the Poisson operator for C2 infrastructure, highlighting its abuse in low-cost cyber attacks.
Tag: C2
DuckDNS: Free Dynamic DNS Service Provider
DuckDNS offers free dynamic DNS services, which were exploited by the attacker for C2 communication.
Backdoor.Turn Remote Access Trojan
Backdoor.Turn is a custom Go-based RAT that conceals C2 traffic inside Microsoft Teams relay infrastructure using TURN relays and QUIC sessions, supporting…
Cobalt Strike: Commercial Penetration Testing Tool Abused by Threat Actors
Cobalt Strike is a commercial penetration testing tool frequently abused by threat actors for command-and-control. In this campaign, it was used by…
Tron Blockchain: Decentralized Platform
The Tron blockchain is used in a supply chain attack as a second-stage C2 relay to encode commands via transaction hashes.
Binance Smart Chain (BSC): Blockchain
Binance Smart Chain (BSC) is used in conjunction with the Tron blockchain to encode active payloads in transaction hashes.