TencShell Command-and-Control Infrastructure
TencShell is a known C2 infrastructure used by suspected China-linked threat actors. Hunt.io observed an open directory sharing identical HTTP header fingerprints…
Tag: C2
TuxBot v3 Evolution: LLM-Assisted IoT Botnet
TuxBot v3 Evolution is a modular IoT botnet framework with C-based bot agent, Go-based C2 server, custom exploit VM, and Docker test…
Compromised jscrambler 8.14.0 npm Release Drops Rust Infostealer During Install
Version 8.14.0 of the jscrambler npm package, published on July 11, 2026, shipped with a malicious preinstall hook that silently drops and…
MODBEACON: Rust-Based Remote Access Trojan
MODBEACON is a Rust-based RAT using gRPC streaming for encrypted C2 communication. It is memory-resident, modular, and uses Xray/V2Ray transport layer. Capabilities…
New MODBEACON RAT Uses gRPC Streaming for Encrypted C2 Traffic
The China-linked cybercrime group Silver Fox has been attributed to a new Rust-based remote access trojan (RAT) called MODBEACON. Chinese cybersecurity company…
LONGLEASH: New Backdoor Framework by UAT-7810
LONGLEASH is a full-fledged backdoor framework developed by Chinese APT UAT-7810 as a successor to ShortLeash. It includes an executor component that…
ShortLeash: Custom Backdoor Used by UAT-7810
ShortLeash is a custom backdoor developed by Chinese APT UAT-7810 that can contact an external server, host a web server, and act…
Cavern C2 Framework: Evolution and Capabilities
Cavern (aka Cav3rn) is a modular command-and-control framework used by Iranian nation-state hackers, linked to Cavern Manticore. It supports various post-exploitation modules…
New Java-Based QuimaRAT MaaS Built to Run on Windows, Linux, and macOS
Cybersecurity researchers at LevelBlue have identified a new Java-based remote access trojan (RAT) named QuimaRAT, which is capable of targeting Windows, Linux,…
QuimaRAT: A New Java-Based Cross-Platform Remote Access Trojan
QuimaRAT is a Java-based remote access trojan (RAT) advertised under a malware-as-a-service (MaaS) model, capable of targeting Windows, Linux, and macOS. It…