Steam Community Profiles abused as C2 network in new WordPress malware infection campaign

Steam Community Profiles abused as C2 network in new WordPress malware infection campaign

A new cheeky malware campaign abuses the comment section as a roadsign to malware

HazyBeacon Camapign Weaponizes Amazon Web Services for Stealthy Communications

A new malware campaign is turning trusted cloud infrastructure against the organizations that rely on it. Known as HazyBeacon and tracked under cluster identifier CL-STA-1020, the campaign targets government networks across Southeast Asia. Rather than using easily blocked servers, the threat actors hide inside one of the world’s most trusted platforms, Amazon Web Services (AWS). What sets this campaign apart is how it communicates with infected …

HazyBeacon Campaign Abuses AWS for Stealthy C2 Communications

A newly documented cyber espionage operation known as HazyBeacon, tracked as CL-STA-1020, is leveraging Amazon Web Services (AWS) to build stealthy command-and-control (C2) channels that are difficult for defenders to detect. The campaign primarily targets government networks in Southeast Asia and represents a growing shift toward cloud-native attack infrastructure. This misconfiguration enables threat actors to create covert communication relay…