Hackers exploit AWS X-Ray, creating a sophisticated command-and-control framework.
A recent cybersecurity report reveals the emergence of XRayC2, a sophisticated command-and-control framework that exploits Amazon Web Services (AWS) X-Ray, transforming it from a performance monitoring tool into a vehicle for malicious activities. This innovative toolkit allows attackers to establish covert communication channels by blending malicious traffic with legitimate application data, significantly complicating detection efforts. Utilizing AWS’s infrastructure, the framework employs a three-phase communication process that encompasses beaconing, command delivery, and data exfiltration, all while …
Read More