Junior Hacker Used Tailscale and OpenSSH to Maintain Persistent Access After C2 Outage
A French-speaking attacker, operating under the handle 'Poisson,' breached a small French automotive business using a keylogger to steal banking and email…
Tag: Demon agent
Havoc: Post-Exploitation Framework
Havoc is a post-exploitation framework used by attackers, including the 'Poisson' operator, to deploy the Demon agent for command and control.
Demon Agent: Havoc’s Implant
The Demon agent is the implant component of the Havoc framework, used for in-memory execution and persistence on compromised systems.