Google Fonts: Disguised C&C Hostnames
Google Fonts is a font hosting service. XG-Web disguises C&C hostnames to mimic Google Fonts resources.
Tag: C&C
XG-Web: Browser-Centric Remote-Access and Information-Stealing Framework
XG-Web is a browser-centric remote-access and information-stealing framework used by Jewelbug. It turns a victim's browser into a full remote-control channel, allowing…
Google Gemini CLI Abused for Botnet Management
The open-source AI tool was used as the primary hacking agent, handling coding, debugging, and infrastructure management for a small botnet.
VirusTotal: Malware Scanning Service
VirusTotal is a service that analyzes files and URLs for malware. XG-Web uses it to check C&C infrastructure every 12 hours for…