Throwback Thursday – A Guide to Configuring Throwback

On a hardened network with egress rules and NTLM proxy authentication, testers used a custom beaconing backdoor and an exposed 22 GB VHD mounted via diskpart for covert data exfiltration.

Describes embedding a Base64 Meterpreter payload in an Office VBA macro so a legitimate emailed document can be re-sent as a backdoor after harvesting domain credentials.

BOFScale runs a patched Tailscale daemon as a BOF-PE inside the implant, relaying C2 over standard WebSockets so DERP and control-plane traffic blends in behind CDNs like CloudFront and Fastly.

The FCC added foreign-made consumer routers to its Covered List over backdoor concerns: new models need Conditional Approval while a waiver protects existing devices until March 1, 2027.

Ceri Coburn proposes a new BOF PE reference design that runs the same linked EXE standalone or in-agent with full C++ and exception support, easing maintenance pain of traditional Beacon Object Files.

Custom PowerShell modules and Python packages in Azure Automation Accounts can be backdoored for persistence. NetSPI demonstrates the attack and ships a tool to audit custom modules.