Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

AdaptixC2 Uncovered: Capabilities, Tactics & Hunting Strategies

hunt.io | research | #threat-hunting | #c2 | #malware-analysis | #detection | #adaptixc2

Summary

A deep dive into AdaptixC2: the lightweight modular framework's multi-protocol beacons, RC4 encryption and anti-analysis tricks—and the 102 active servers Hunt.io found in real-world operations.
Published
Collected

original ↗

Related coverage

blog · hunt.io
How We Identify Malicious Infrastructure At Hunt.io
Hunt explains how it identifies, tracks and 'burns' malicious C2 servers using TLS certificates, HTTP headers, SSH keys, JARM/JA4x hashes and TCP banners, seen in Gh0st and ShadowPad cases.
blog · hunt.io
Introducing the Hunt.io C2 Feed
Hunt announces its C2 Feed, covering how the team identifies and tracks malicious command-and-control servers and packages this intelligence to help defenders block adversary infrastructure.
blog · hunt.io
Transparency of Attacker Tooling
How open directories aid threat hunting and incident response: exposed C2 executables, configs, bash history and RAT logs can reveal victims; Hunt automates finding and pivoting on them.
blog · hunt.io
Let's go Hunting
The launch of Hunt.io: a threat-hunting platform with feeds of active C2 servers across 125+ malware families, open-directory counterintelligence and malicious-infrastructure data.
blog · netlas.io
How we hunt C2 infrastructure at RST Cloud using Netlas
How RST Cloud hunts C2 infrastructure with Netlas: a seven-step loop from goals and samples to fingerprints (JARM, certificates, HTTP headers), scheduled searches and multi-criteria validation.
blog · netlas.io
Proactive Threat Hunting: Techniques to Identify Malicious Infrastructure
Proactive threat hunting for malicious infrastructure: fingerprint C2 via favicon hashes, HTTP headers, TLS fields and JARM, then pivot across Netlas, Shodan and Censys to map attacker ecosystems.
back